PT-2025-27815 · Abb · Abb Rmc-100+1

Published

2025-07-03

·

Updated

2025-07-03

·

CVE-2025-6071

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016
Description: The issue allows an attacker to gain access to salted information, which can be used to decrypt MQTT information. This is due to the use of a hard-coded cryptographic key.
Recommendations: For ABB RMC-100 versions 2105457-043 through 2105457-045, update to a version that does not use a hard-coded cryptographic key. For ABB RMC-100 LITE versions 2106229-015 through 2106229-016, update to a version that does not use a hard-coded cryptographic key. As a temporary workaround, consider restricting access to the MQTT information until a patch is available.

Fix

Weakness Enumeration

CWE-321

Related Identifiers

BDU:2025-08250
CVE-2025-6071

Affected Products

Abb Rmc-100
Abb Rmc-100 Lite