A stack-based buffer overflow vulnerability in the ABB RMC-100 and RMC-100 LITE series poses a significant risk to industrial control network availability.

The vulnerability is a stack-based buffer overflow (CWE-121) occurring within the REST interface. Successful exploitation requires the interface to be enabled, user authentication to be active, and the prior exploitation of CVE-2025-6074 to bypass initial controls.

The vulnerability carries a CVSS score of 7.5, indicating a high severity level primarily due to the potential for service disruption. In an industrial environment, the unexpected crash of a control device can lead to unplanned downtime, loss of operational visibility, and potential safety risks if the device is managing critical processes.

Immediate Action: Monitor the official ABB security advisory portal for the release of firmware updates and apply them to all affected RMC-100 and RMC-100 LITE units as soon as they become available.

Proactive Monitoring: Review system logs for unauthorized access attempts to the REST interface and monitor for unusual traffic patterns targeting control network communication ports.

Compensating Controls: Restrict network access to the REST interface by implementing strict firewall rules that limit communication to authorized management stations only.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for service disruption in industrial control environments, operators should treat this vulnerability with high priority. We recommend isolating affected devices from public or untrusted network segments until official patches are applied and verified.