Security Flaw in Redundancy Module Configuration Tool by Rockwell Automation

CVE-2026-9633

What is CVE-2026-9633?

A security issue has been identified in the Redundancy Module Configuration Tool where the RM3ConfigTool.exe binary improperly handles DLL searches. It searches directories within the system path, some of which may permit write access to standard users due to incorrect default permissions. Malicious actors can exploit this flaw by placing a rogue DLL within these directories. When an administrator runs the tool, the malicious DLL is executed with elevated privileges, compromising the system's security.

References