Rockwell Automation Redundancy Module Configuration Tool: 2 CVEs, High 7.3
Summary
CISA reports 2 vulnerabilities in Rockwell Automation Redundancy Module Configuration Tool. Weakness type: Incorrect Default Permissions. Successful exploitation of these vulnerabilities could allow for an attacker to escalate and execute processes with administrator privileges. Highest CVSS v3 score: 7.3 (High), not remotely exploitable per its CVSS vector.
At a glance
- Vendor
- Rockwell Automation
- Products
- Redundancy Module Configuration Tool
- CVEs
- CVE-2026-9633, CVE-2026-9634
- Highest CVSS v3
- 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Critical Manufacturing
- Deployed
- Worldwide
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-9633 | Incorrect Default Permissions | 7.3 | – | No | A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the too… |
| CVE-2026-9634 | Incorrect Default Permissions | 7.3 | – | No | A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool… |
Affected products (2)
- Rockwell Automation Redundancy Module Configuration Tool: 10.00.00
- Rockwell Automation Redundancy Module Configuration Tool: >=9.00.00|<=10.00.00
Vendor fixes and mitigations (from advisory)
- Vendor Fix: Rockwell Automation has released Redundancy Module Configuration Tool version 10.01.00 for users to install.
- Mitigation: Customers using the affected software, who are not able to upgrade to one of the corrected versions, should use Rockwell Automation's security best practices (https://support.rockwellautomation.com/app/answers/answer_view/a_id/1085012/loc/en_US#__highlight). link
- Mitigation: For more information, see Rockwell Automation Security Advisories: https://www.rockwellautomation.com/en-us/trust-center/security-advisories.html. link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.