CVE-2025-6071 — Hard Coded Key used for AES encryption

CVE-2025-6071

Hard Coded Key used for AES encryption PUBLISHED

Description (CNA)

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. An attacker can gain access to salted information to decrypt MQTT information. This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

Affected (CNA)

Vendor / product	Versions
ABB / RMC-100	affected 2105457-043 through 2105457-045
ABB / RMC-100 LITE	affected 2106229-015 through 2106229-016

CWE

CWE-321

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A3623&LanguageCode=en&DocumentPartId=PDF&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.