8.2
High
CVE-2025-6072 Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE
Description
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RMC-100 2105457 | 2105457-043 → 2105457-045 | No fix stated |
| RMC-100 LITE 2106229 | 2106229-015 → 2106229-016 | No fix stated |
Other CVEs of RMC-100
The 4 CVEs of RMC-100 →
CVE-2025-6071
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE
6.3
Medium
CVE-2025-6073
Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE
8.2
High
CVE-2025-6074
Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE
6.3
Medium