Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-6071

Hard Coded Key used for AES encryption

Description

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB RMC-100

Default version status: unaffected

  • 2105457-043 to ≤ 2105457-045affected

ABB RMC-100 LITE

Default version status: unaffected

  • 2106229-015 to ≤ 2106229-016affected

References