Rockwell Automation Redundancy Module Configuration Tool 10.00.00 Directory Search RMConfigTool.exe permission

Summaryinfo

A vulnerability described as problematic has been identified in Rockwell Automation Redundancy Module Configuration Tool 10.00.00. The impacted element is an unknown function of the file RMConfigTool.exe of the component Directory Search. The manipulation results in permission. This vulnerability was named CVE-2026-9634. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Rockwell Automation Redundancy Module Configuration Tool 10.00.00. Affected is an unknown code block of the file RMConfigTool.exe of the component Directory Search. The manipulation with an unknown input leads to a permission vulnerability. CWE is classifying the issue as CWE-275. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.

The advisory is shared for download at rockwellautomation.com. This vulnerability is traded as CVE-2026-9634 since 05/26/2026. The exploitability is told to be easy. The attack needs to be approached locally. Additional levels of successful authentication are necessary for exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1222.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Automation Software

Vendor

• Rockwell Automation

Name

• Redundancy Module Configuration Tool

Version

• 10.00.00

License

• commercial

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion