ABB Patches Critical T-MAC Plus Terminal System Flaws

ABB published urgent security updates for T-MAC Plus after discovery of multiple critical vulnerabilities — including a CVSS 9.9 file disclosure and a broken access control allowing privilege escalation in the web application, plus a card-reader DoS requiring local network access. The flaws affect terminal management systems used in chemical and petroleum environments; ABB has released fixes (T-MAC Plus v4.0-25) and recommends rapid patching, network isolation, and strict least-privilege controls to mitigate operational and safety risks.