Most recent entries from all

9AKK108471A3623 — RMC - 100 Vulnerabilities in web UI (REST Interface)

2026-10-03T11:53:38.624398+00:00

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).

bdu:2025-08250

2026-10-03T11:53:38.624446+00:00

bdu:2025-08250

EUVD-2026-246407

2026-10-03T11:53:38.624463+00:00

EUVD-2026-246407

fkie_cve-2025-6071

2026-10-03T11:53:38.624476+00:00

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.

An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

GHSA-m6rc-cqv8-pp8r

2026-10-03T11:53:38.624499+00:00

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.

An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

ICSA-25-196-02 — ABB RMC-100 (Update A)

2026-10-03T11:53:38.624516+00:00

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.