The flaw is an uncontrolled search path element (CWE-427) that arises because the UPS management application uses an installation directory with insufficient permissions. A malicious actor can place a DLL in that directory, and when the service starts, the application automatically loads missing DLLs from the same directory. This behavior causes the injected DLL to execute with the service’s administrator privileges, allowing the attacker to run arbitrary code on the system.

The vulnerability affects Omron Social Solutions Co., Ltd.’s PowerAttendant Standard Edition UPS management application. No specific affected versions are listed, so any release that has not yet disclosed a patch should be considered potentially vulnerable.

The CVSS score of 7.8 indicates a high severity level. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Because the exploitation requires write access to the application’s installation directory, the attack vector is likely local, but once a malicious DLL is placed, the code runs with elevated privileges. The lack of a public workaround increases the risk until an official fix is released.