Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE.


An attacker can gain access to salted information to decrypt MQTT information.
This issue affects RMC-100: from 2105457-043 through 2105457-045; RMC-100 LITE: from 2106229-015 through 2106229-016.

CVE-2025-6071 is a vulnerability identified in ABB's RMC-100 and RMC-100 LITE devices, specifically affecting versions 2105457-043 through 2105457-045 for RMC-100 and 2106229-015 through 2106229-016 for RMC-100 LITE. The vulnerability is classified under CWE-321, which pertains to the use of hard-coded cryptographic keys. In this case, the devices use a hard-coded cryptographic key to protect MQTT (Message Queuing Telemetry Transport) communication data. An attacker who gains access to the salted information can leverage this vulnerability to decrypt MQTT messages, potentially exposing sensitive operational data transmitted between devices or systems. The vulnerability does not require authentication or user interaction and can be exploited remotely over the network, as indicated by the CVSS vector (AV:N/AC:L/AT:P/PR:N/UI:N). The CVSS score of 6.3 (medium severity) reflects the moderate impact and ease of exploitation. The use of hard-coded keys is a critical cryptographic weakness because it undermines the confidentiality of encrypted communications, allowing attackers to bypass encryption protections once the key is discovered or extracted. Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk to the confidentiality of MQTT communications in affected ABB devices, which are commonly used in industrial control and automation environments.

Detailed information about CVE-2025-6071: CWE-321 Use of Hard-coded Cryptographic Key in ABB RMC-100 affecting ABB RMC-100. Get real-time updates, technical det

CVE-2025-6071: CWE-321 Use of Hard-coded Cryptographic Key in ABB RMC-100 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6071: CWE-321 Use of Hard-coded Cryptographic Key in ABB RMC-100

Threats Tagged 'cve-2025-6071'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6071'

Lead Pen Test Professional