CVE-2025-6071

CWE-3213 documents3 sources
Severity
6.3MEDIUM
EPSS
0.1%
top 81.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ABB Rmc-100ABB Rmc-100 Lite
Timeline
PublishedJul 3

Description

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5abb/rmc-100_lite2106229-015 — 2106229-016
▶CVEListV5abb/rmc-1002105457-043 — 2105457-045

🔴Vulnerability Details

2
CVEList
Hard Coded Key used for AES encryption↗2025-07-03
▶
GHSA
GHSA-m6rc-cqv8-pp8r: Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE↗2025-07-03
▶
CVE-2025-6071 (MEDIUM CVSS 6.3) | Use of Hard-coded Cryptographic Key | cvebase.io