ABB RMC-100 and RMC-100 LITE Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in ABB RMC-100 and RMC-100 LITE devices. This issue arises when the REST interface is enabled by the user. An attacker who gains access to the control network and exploits CVE-2025-6074 can use the JSON configuration to overflow the date of expiration field. The vulnerability affects RMC-100 versions 2105457-043 through 2105457-045 and RMC-100 LITE versions 2106229-015 through 2106229-016.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.