CVE-2026-9633
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Vulnerability in the Redundancy Module Configuration Tool (RM3ConfigTool.exe) where it searches system path directories for a required DLL, some of which may be writable by standard users due to incorrect default permissions. A local attacker can place a malicious DLL that gets loaded when an administrator runs the tool, executing with Administrator/SYSTEM privileges.
Risk Assessment
A local attacker can gain full system control, leading to infrastructure compromise and potential exposure of critical data.
Recommendation
Immediately restrict permissions on system path directories and update the tool to a patched version.
Other vulnerabilities in Redundancy Module Configuration Tool
Original NVD description (English source)
A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard (non-administrator) users due to incorrect default permissions. If a local attacker places a malicious DLL in such a directory and an administrator subsequently runs the tool, the malicious DLL is loaded into the elevated process and executes with Administrator/SYSTEM privileges.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS