Key Systems Inc Global Facilities Management Software v.20230721a contains a flaw in the PIN component of its login functionality that allows a remote attacker to gain elevated privileges. This weakness, identified as CWE‑269, enables an attacker to bypass normal authentication controls and operate with higher system authority, potentially exposing confidential data, modifying system settings, and disrupting operations.

Key Systems Inc. Global Facilities Management Software version 20230721a is affected.

The vulnerability carries a CVSS score of 9.4, indicating a high severity level, but the EPSS score is less than 1%, implying a very low current exploitation probability. It is not listed in the CISA Known Exploited Vulnerabilities catalog. Based on the description, it is inferred that the attack vector is remote access via the login interface, requiring the attacker to supply a valid or guessed PIN to manipulate authentication logic.