ABB RMC-100 and RMC-100 LITE Stack-Based Buffer Overflow Vulnerability

A stack-based buffer overflow vulnerability has been identified in ABB RMC-100 and RMC-100 LITE devices. This vulnerability arises when the REST interface is enabled by the user, allowing an attacker with access to the control network to exploit the issue. The vulnerability is compounded if user/password broker authentication is active and CVE-2025-6074 has been exploited. Under these conditions, the attacker can overflow the buffer for the username or password, potentially leading to unauthorized access or manipulation.

Impact

Exploitation of this vulnerability can lead to a stack-based buffer overflow, which may allow for arbitrary code execution or causing a denial-of-service condition on the affected device.