Skip to content
OpenAdvisories
High ICSA-25-196-02 4 CVEs

ABB RMC-100 (Update A)

Published Jul 3, 2025 · Updated May 14, 2026 · Revision 4

Vendor: ABB Product: RMC-100 Product: RMC-100 LITE

Summary

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).

Vulnerabilities 4

  • High 7.5
    CVE-2025-6072

    Stack Buffer Overflow in MQTTCore

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to ove…

    ABB RMC-100 LITE RMC-100 ICS / OT
  • High 7.5
    CVE-2025-6073

    Stack Buffer Overflow in MQTTCore

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited…

    ABB RMC-100 LITE RMC-100 ICS / OT
  • Medium 6.5
    CVE-2025-6074

    Authentication Bypass to the MQTT configuration Web Interface

    Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to source code and control network, the attacker can bypass the REST interface authentication and …

    ABB RMC-100 LITE RMC-100 ICS / OT
  • Medium 5.3
    CVE-2025-6071

    Hard Coded Key used for AES encryption

    Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015…

    ABB RMC-100 LITE RMC-100 ICS / OT

Revision history

  1. #4

    CISA Republication update based on ABB 9AKK108471A3623 advisory

  2. #3

    Added information on the software customer packages that correct the reported issue.

  3. #2

    CISA Republication - Initial Publication

  4. #1

    Initial version.

References