Abb Rmc-100 vulnerabilities

4 CVEs affecting Abb Rmc-100, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-6074, published 2025-07-03.

More from Abb.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-6073, published 2025-07-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and user/password…
• CVE-2025-6072, published 2025-07-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074…
• CVE-2025-6074, published 2025-07-03. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to source code and control network,…
• CVE-2025-6071, published 2025-07-03. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from…