Description
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.
When the REST interface is enabled by the user, and an attacker gains access to
the control network, and user/password broker authentication is enabled, and
CVE-2025-6074 is exploited, the attacker can overflow the buffer for username or
password.
This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ABB | RMC-100 | 2105457-043 – ≤ 2105457-045 | — |
| ABB | RMC-100 LITE | 2106229-015 – ≤ 2106229-016 | — |
Advisories 2
- ICSA-25-196-02 ABB RMC-100 (Update A) CISA ICS & IT advisories · May 14, 2026
- 9AKK108471A3623 RMC - 100 Vulnerabilities in web UI (REST Interface) ABB PSIRT · Aug 18, 2025