Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-6071 EUVD-2025-19891GHSA-m6rc-cqv8-pp8r

Hard Coded Key used for AES encryption

Published Jul 3, 2025 · Updated Jul 3, 2025 · Assigned by ABB

Description

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.

An attacker can gain access to salted information to decrypt MQTT information.
This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

Affected products

VendorProductAffectedFixed
ABB RMC-100 2105457-043 – ≤ 2105457-045 —
ABB RMC-100 LITE 2106229-015 – ≤ 2106229-016 —

Advisories 2

References