Skip to content
OpenAdvisories

Product · ABB

RMC-100

4 known vulnerabilities.

RMC-100 at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202540
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • High max 7.5
    ICSA-25-196-02 4 CVEs rev. 4

    ABB RMC-100 (Update A)

    ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT…

    ABB
    first Jul 3, 2025
  • High max 7.5
    9AKK108471A3623 4 CVEs rev. 2

    RMC - 100 Vulnerabilities in web UI (REST Interface)

    ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT…

    ABB
    first Jul 3, 2025
  • High max 7.5
    9AKK108470A8565 1 CVE

    RMC-100 Vulnerability in the Web UI (REST Interface)

    An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.

    ABB
  • High max 7.5
    ICSA-25-084-01 1 CVE

    ABB RMC-100

    An update is available that resolves a vulnerability in the product versions listed as affected in this advisory. An attacker who successfully exploited this vulnerability could cause the web UI to stop.

    ABB
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.3
    CVE-2025-6071

    Hard Coded Key used for AES encryption

    Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015…

    ABB RMC-100 LITE RMC-100 ICS / OT
  • High 7.5
    CVE-2025-6072

    Stack Buffer Overflow in MQTTCore

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to ove…

    ABB RMC-100 LITE RMC-100 ICS / OT
  • High 7.5
    CVE-2025-6073

    Stack Buffer Overflow in MQTTCore

    Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited…

    ABB RMC-100 LITE RMC-100 ICS / OT
  • Medium 6.5
    CVE-2025-6074

    Authentication Bypass to the MQTT configuration Web Interface

    Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to source code and control network, the attacker can bypass the REST interface authentication and …

    ABB RMC-100 LITE RMC-100 ICS / OT