CVE-2026-9633: CWE-276 Incorrect default permissions in Rockwell Automation Redundancy Module Configuration Tool

The Redundancy Module Configuration Tool (RM3ConfigTool.exe) in Rockwell Automation version 10.00.00 improperly sets default permissions on directories in the system path. This allows standard users to write malicious DLLs into these directories. Because the tool loads DLLs from these paths when run by an administrator, the malicious DLL executes with elevated privileges, resulting in privilege escalation. This is classified under CWE-276 (Incorrect Default Permissions).

An attacker with local user access can gain Administrator or SYSTEM privileges by placing a malicious DLL in a writable directory searched by the tool. This leads to privilege escalation and potential full system compromise when an administrator runs the vulnerable tool.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write permissions on directories in the system path to prevent unprivileged users from placing malicious DLLs. Avoid running the Redundancy Module Configuration Tool from accounts with elevated privileges if possible.