# CVE-2025-14771: ABB T-MAC Plus unauthorized file and directory access

Source: https://junglewise.ai/threats/cve-2025-14771-abb-t-mac-plus-unauthorized-file-and-directory-access  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-03. Updated: 2026-06-03  
License: CC BY 4.0 with a link back

CVE-2025-14771 · Severity: critical · CVSS 9.9 · Published 2026-06-03

ABB T-MAC Plus, a system used for building automation and energy management, contains a vulnerability that allows unauthorized access to internal files and directories. An attacker could exploit this to view sensitive configuration data, modify system settings, or disrupt operations. This could lead to a total loss of confidentiality and control over the affected building management infrastructure.

Technologies: [ABB T-MAC Plus](https://junglewise.ai/threats/technologies/t-mac-plus). Vendors: [ABB](https://junglewise.ai/threats/vendors/abb).

## Quick answers

**Is CVE-2025-14771 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-14771 being exploited in the wild.

**How severe is CVE-2025-14771?** Critical severity, with a CVSS score of 9.9, published 3 June 2026.

**Which products and versions are affected?** ABB T-MAC Plus 4.0-24.

**Is there a fix for CVE-2025-14771?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-14771 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-14771?** Check whether you run ABB T-MAC Plus at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as CWE-552 (Files or Directories Accessible to External Parties) exists in ABB T-MAC Plus version 4.0-24. The flaw allows an authenticated user with low privileges to access sensitive files or directories that should be restricted. Because the CVSS vector indicates a 'Scope Change' (S:C), the impact extends beyond the immediate application to the underlying host or connected systems. An attacker can leverage this access to achieve full confidentiality, integrity, and availability impact (C:H/I:H/A:H) over the network without user interaction.

## Affected products

- ABB T-MAC Plus 4.0-24

## Timeline

- 2026-06-03: advisory: Initial disclosure by ABB and NVD publication.

## References

- [https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch](https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch)

## Related threats

- [ABB T-MAC Plus incorrect authorization](https://junglewise.ai/threats/cve-2025-14774-abb-t-mac-plus-incorrect-authorization)
- [ABB T-MAC Plus cross-site scripting](https://junglewise.ai/threats/cve-2025-14773-abb-t-mac-plus-cross-site-scripting)
- [ABB T-MAC Plus authorization bypass via user-controlled key](https://junglewise.ai/threats/cve-2025-14772-abb-t-mac-plus-authorization-bypass-via-user-controlled-key)