Stack-based Buffer Overflow in ABB RMC-100 and RMC-100 LITE Products
CVE-2025-6073

8.2HIGH

Key Information:

Vendor

Abb

Status
Rmc-100
Rmc-100 Lite
Vendor
CVE Published:
3 July 2025

What is CVE-2025-6073?

A stack-based buffer overflow vulnerability exists in ABB's RMC-100 and RMC-100 LITE products. When the REST interface is activated by the user and an attacker gains access to the control network—provided that user/password broker authentication is also enabled—there's a potential for exploitation. Successful exploitation could lead to buffer overflow conditions during authentication processes, compromising user credentials and system integrity.

Affected Version(s)

RMC-100 2105457-043 <= 2105457-045

RMC-100 LITE 2106229-015 <= 2106229-016

References

https://search.abb.com/library/Download.aspx?DocumentID=9...

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ABB thanks Claroty Team82 Research for helping to identify the vulnerabilities and protecting our customers
.
CVE-2025-6073 : Stack-based Buffer Overflow in ABB RMC-100 and RMC-100 LITE Products