SB20250716125 - Multiple vulnerabilities in ABB RMC-100

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Use of hard-coded cryptographic key (CVE-ID: CVE-2025-6074)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to use of hard-coded cryptographic key. A remote attacker can bypass REST interface authentication and gain access to MQTT configuration data.

2) Stack-based buffer overflow (CVE-ID: CVE-2025-6073)

The vulnerability allows a remote attacker to perform a denial off service (DoS) attack.

The vulnerability exists due to a boundary error. A remote unauthenticated attacker can trigger stack-based buffer overflow and cause a denial of service condition on the target system.

3) Stack-based buffer overflow (CVE-ID: CVE-2025-6072)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error. A remote unauthenticated attacker can use the JSON configuration, trigger stack-based buffer overflow and cause a denial of service condition on the target system.

4) Use of hard-coded cryptographic key (CVE-ID: CVE-2025-6071)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to use of hard-coded cryptographic key. A remote attacker can gain access to salted information to decrypt MQTT information.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A3623&LanguageCode=en&DocumentPartId=PDF&Action=Launch
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-02