The vulnerability arises from an insecure DLL search path in beat‑access for Windows version 3.0.3 and earlier, allowing an attacker to influence the dynamic link library that the application loads. If an attacker can place a malicious DLL in a directory that the application searches, the DLL will be loaded and executed with SYSTEM privileges, resulting in arbitrary code execution on the host system. This flaw is identified as CWE‑427.

FUJIFILM Business Innovation Corp.'s beat‑access for Windows for all versions 3.0.3 and earlier are affected. No specific sub‑versions are listed beyond that threshold.

The CVSS score of 5.4 indicates moderate severity, and the EPSS score of less than 1% suggests a very low current exploitation probability. Because the flaw permits execution with SYSTEM rights, the impact is significant if an adversary can supply a crafted DLL. No official KEV listing currently exists, so the vulnerability has not yet been identified as a known exploited issue in the CISA catalog. The likely attack vector requires an attacker to supply a DLL that the application will load, which could be achieved via social engineering, supply chain compromise or local code execution.