ZeroHour

Search: “Redundancy Module Configuration Tool”

2 items

Rockwell Automation Redundancy Module Configuration Tool

CISA warns CVE-2026-9633 in Rockwell Automation Redundancy Module Configuration Tool lets attackers execute processes with administrator privileges; fix in 10.01.00.

CISA released an ICS advisory for Rockwell Automation Redundancy Module Configuration Tool. CVE-2026-9633 could allow an attacker to escalate privileges and execute processes with administrator rights. Versions 9.00.00 through 10.00.00 are affected, and the vendor shipped a fix in version 10.01.00.

CISA Advisories · 15d agoAdvisoryCVE-2026-9633

CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production

CISA, NSA, FBI and other agencies warn of active targeting of internet-exposed Siemens S7 PLCs and urge patching, exposure removal and hardening.

Joint advisory AA26-231A from the NSA, CISA, FBI, Department of Energy and EPA warns that actors are actively targeting Siemens S7 PLCs using internet scanning, AI-assisted scripts and libraries such as Snap7 and python-snap7 over S7comm on TCP port 102. The advisory covers S7-200 through S7-1500 series controllers and recommends patching, removing internet exposure, access controls, monitoring and disabling unneeded services. Siemens states no new S7 vulnerabilities are involved, only misconfigurations addressed in existing ProductCERT guidance SSB-104599. The article details how to apply each measure without breaking production dependencies such as remote I/O, HMI links and diagnostics.

CSO Online · 7d agoAdvisory in the wild