This vulnerability (CVE-2025-14771) affects ABB T-MAC Plus version 4.0-24 and involves files or directories being accessible to unauthorized external parties, categorized as CWE-552. The CVSS 3.1 base score is 9.9, indicating critical impact with network attack vector, low complexity, and privileges required at low level. The vulnerability allows an attacker to potentially compromise confidentiality, integrity, and availability of the affected system. No vendor remediation level or patch information is provided, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows external parties to access files or directories that should be restricted, potentially leading to full compromise of confidentiality, integrity, and availability of the ABB T-MAC Plus system version 4.0-24. This could enable attackers to read sensitive data, modify system files, or disrupt system operations. The critical CVSS score reflects the severity of these impacts. No known exploits are reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor ABB's security advisories for updates. Until a patch is available, restrict network access to the affected system to trusted parties only and consider additional access controls to limit exposure.