IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Toptech Systems RCU II+ and Multiload II+

HIGH
CVSS 8.8
Date 2026-07-30T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of this vulnerability could allow an attacker to gain full system control and misuse it to access or manipulate connected networks and resources.

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2026-12562 8.8 high
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework (TCF) service that does not require any authentication, allowing an attacker to directly interact with the Linux environment that powers the device. Once connected, an attacker can freely view and modify the filesystem, manipulate running processes, and control network interfaces, enabling deep alteration of system behavior.

// Remediations (8)

Mitigation: Install the latest firmware from https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firm
Install the latest firmware from https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/. *-* This method requires stopping the bay and breaking the W&M seal. Be sure to back up the current ML configuration before performing the firmware update.
Mitigation: For questions, contact Toptech Systems Support at [email protected]. Additional details are avail
For questions, contact Toptech Systems Support at [email protected]. Additional details are available in Toptech System's firmware vulnerability notice: https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf.
Mitigation: Run one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT) available at https://s3.amazo
Run one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT) available at https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip, https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz. *-* This option does not require breaking Weights and Measures seals and has the least operational impact.
Mitigation: This method requires stopping the bay and breaking the W&M seal. Be sure to back up the current ML c
This method requires stopping the bay and breaking the W&M seal. Be sure to back up the current ML configuration before performing the firmware update.
Mitigation: Toptech Systems provides two methods for remediating affected RCU II+ and Multiload II+ units: First
Toptech Systems provides two methods for remediating affected RCU II+ and Multiload II+ units: First, move the device to a closed or segmented network without untrusted access.
Mitigation: Run one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT) available at https://s3.amazo
Run one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT) available at https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip, https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz. *-* This option does not require breaking Weights and Measures seals and has the least operational impact.
Mitigation: For questions, contact Toptech Systems Support at [email protected]. Additional details are avail
For questions, contact Toptech Systems Support at [email protected]. Additional details are available in Toptech System's firmware vulnerability notice: https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf.
Mitigation: This option does not require breaking Weights and Measures seals and has the least operational impac
This option does not require breaking Weights and Measures seals and has the least operational impact.

// References