ICSA-25-196-02

icsaUScisa_csaf_ot

ABB RMC-100 (Update A)

view advisory published 2025-07-03

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-6074US—OT elevated—
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to source code a…
CVE-2025-6073US——
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, an…
CVE-2025-6072US——
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network,…
CVE-2025-6071US—OT elevated—
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affe…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • FixedRMC-100

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100 LITE

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100 LITE

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100 LITE

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

  • FixedRMC-100 LITE

    The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan