CVE-2026-9634: Rockwell Automation Redundancy Module Configuration

Описание

Оригинално описание

A security issue exists within the Redundancy Module Configuration Tool. The RMConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.

Засегнати продукти

• Rockwell Automation Redundancy Module Configuration Tool: 10.00.00

Вид слабост

• CWE-276 Неправилни права по подразбиране

История

Други уязвимости в Rockwell Automation Redundancy Module Configuration Tool

• 7.0CVE-2026-9633

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-9634
• https://nvd.nist.gov/vuln/detail/CVE-2026-9634
• https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1800.html