Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-6072

Stack Buffer Overflow in MQTTCore

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ABB

Description

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ABB RMC-100

Default version status: unaffected

  • 2105457-043 to ≤ 2105457-045affected

ABB RMC-100 LITE

Default version status: unaffected

  • 2106229-015 to ≤ 2106229-016affected

References