Most recent entries from all

9AKK108471A3623 — RMC - 100 Vulnerabilities in web UI (REST Interface)

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).

bdu:2025-08253

EUVD-2026-246409

fkie_cve-2025-6073

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.

When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password broker authentication is enabled, and CVE-2025-6074 is exploited, the attacker can overflow the buffer for username or password.

This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

GHSA-rmg9-687h-jx4v

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE.

This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

ICSA-25-196-02 — ABB RMC-100 (Update A)

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.