CVE-2025-6072 — Stack Buffer Overflow in MQTTCore

Description (CNA)

Stack-based Buffer Overflow vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to the control network, and CVE-2025-6074 is exploited, the attacker can use the JSON configuration to overflow the date of expiration field.This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

Affected (CNA)

Vendor / product	Versions
ABB / RMC-100	affected 2105457-043 through 2105457-045
ABB / RMC-100 LITE	affected 2106229-015 through 2106229-016

CWE

CWE-121

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A3623&LanguageCode=en&DocumentPartId=PDF&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.