Rockwell Automation Redundancy Module Configuration Tool
CISA warns CVE-2026-9633 in Rockwell Automation Redundancy Module Configuration Tool lets attackers execute processes with administrator privileges; fix in 10.01.00.
CISA released an ICS advisory for Rockwell Automation Redundancy Module Configuration Tool. CVE-2026-9633 could allow an attacker to escalate privileges and execute processes with administrator rights. Versions 9.00.00 through 10.00.00 are affected, and the vendor shipped a fix in version 10.01.00.
- CVE-2026-9633 allows admin-level process execution
- Versions 9.00.00 through 10.00.00 affected
- Vendor fix available in version 10.01.00
- Mitigation guidance provided for users who cannot upgrade
- CVEs
- CVE-2026-9633
- Vendors
- Rockwell Automation
- Organizations
- CISARockwell Automation
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-9633 | DLL Hijacking LPE in Rockwell Automation Redundancy Module Configuration Tool | 7.0 | <1% |
From the original article
View CSAF Summary Successful exploitation of these vulnerabilities could allow for an attacker to escalate and execute processes with administrator privileges. The following versions of Rockwell Automation Redundancy Module Configuration Tool are affected: Redundancy Module Configuration Tool 10. 00.
By CISA · cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.