Products from Oki Electric Industry, Ricoh, and Murata Machinery register Windows services that use unquoted file paths. A user with write access to the system‑drive root can create or replace a DLL referenced by the service without the service’s path being quoted. When the authenticated service starts, the injected DLL executes under the SYSTEM account, allowing arbitrary code execution with full system privileges. This can lead to complete control over the host, including configuration changes, persistence, or further lateral movement.

Affected vendors are Oki Electric Industry Co., Ltd., Ricoh Company Ltd., and Murata Machinery Ltd. The vulnerability exists in their OEM-registered Windows services, but no specific version or firmware information is provided in the advisory. Systems running these OEM services on Windows are at risk.

The CVSS v3 score of 8.4 classifies the issue as high severity. The EPSS score is below 1%, indicating that the likelihood of exploitation in the wild is currently low, and the vulnerability is not listed in the CISA KEV catalog. The attack vector requires a local user with write permissions to the system‑drive root; if such access exists, the flaw can be readily exploited. Remote exploitation would require an additional vector to gain write access. Overall, the risk is significant for organizations that have non‑administrator accounts with root‑drive write rights on affected machines.