PT-2025-52408 · Abb · T-Mac Plus

Published 2025-12-19 · Updated 2026-06-03 · CVE-2025-14773

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ABB T-MAC Plus version 4.0-24 Firebox (affected versions not specified)

Description ABB T-MAC Plus is affected by improper neutralization of input during web page generation, which leads to cross-site scripting (XSS), a condition where malicious scripts are injected into trusted websites.

Firebox appliances contain a critical issue in the IKEv2 VPN service. Threat actors are actively exploiting this as part of a broad attack campaign targeting edge networking equipment and exposed infrastructure across multiple vendors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Update Firebox appliances to Fireware 2025.1.4 or higher, Fireware v12.11.6 or higher, Fireware v12.5.15 or higher, or Fireware v12.3.1 Update 4 or higher.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-14773

Affected Products

T-Mac Plus

References · 5

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14773 · Security Note
• https://t.me/CVEtracker/55700 · Telegram Post
• https://t.me/cveNotify/165786 · Telegram Post
• https://reddit.com/r/msp/comments/1pq9f5u/fyi_important_firebox_os_update · Reddit Post