Most recent entries from all

9AKK108471A3623 — RMC - 100 Vulnerabilities in web UI (REST Interface)

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could gain unauthenticated access to the MQTT configu-ration data (CVE-2025-6074), cause a DoS on the MQTT configuration web server (REST interface) (CVE-2025-6073, CVE-2025-6072), or decrypt encrypted MQTT broker credentials (CVE-2025-6071).

bdu:2025-08251

EUVD-2026-246410

fkie_cve-2025-6074

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.

When the REST interface is enabled by the user, and an attacker gains access to source code and control network, the attacker can bypass the REST interface authentication and gain access to MQTT configuration data.

This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

GHSA-2f3f-xhh3-hqgg

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.

This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

ICSA-25-196-02 — ABB RMC-100 (Update A)

ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.