PT-2025-27817 · Abb · Abb Rmc-100+1
Published
2025-07-03
·
Updated
2025-07-04
·
CVE-2025-6073
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
ABB RMC-100 versions 2105457-043 through 2105457-045
ABB RMC-100 LITE versions 2106229-015 through 2106229-016
Description:
A Stack-based Buffer Overflow issue exists when the REST interface is enabled and an attacker gains access to the control network with user/password broker authentication enabled. This allows the attacker to overflow the buffer for
username or password.Recommendations:
For ABB RMC-100 versions 2105457-043 through 2105457-045, consider disabling the REST interface until a patch is available.
For ABB RMC-100 LITE versions 2106229-015 through 2106229-016, restrict access to the control network to minimize the risk of exploitation.
As a temporary workaround, consider disabling user/password broker authentication for both RMC-100 and RMC-100 LITE until a patch is available.
Fix
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Abb Rmc-100
Abb Rmc-100 Lite