ABB RMC-100 (Update A)
ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-6074US | —OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.
When the REST interface is enabled by the user, and an attacker gains access to
source code a… | ||||
| CVE-2025-6073US | — | — | ||
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.
When the REST interface is enabled by the user, and an attacker gains access to
the control network, an… | ||||
| CVE-2025-6072US | — | — | ||
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.
When the REST interface is enabled by the user, and an attacker gains access to
the control network,… | ||||
| CVE-2025-6071US | —OT erhöht | — | ||
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.
An attacker can gain access to salted information to decrypt MQTT information.
This issue affe… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- BehobenRMC-100
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100 LITE
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100 LITE
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100 LITE
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
- BehobenRMC-100 LITE
The problem is corrected in RMC-100 version (2105457-046) and RMC-100 LITE version (2106229-018)
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan