A critical vulnerability in the RSUPPORT RemoteView PC Application Console could allow a local attacker to achieve arbitrary code execution by leveraging an uncontrolled search path.

The application is susceptible to an uncontrolled search path element (CWE-427), where it insecurely searches for libraries. A local attacker can exploit this by placing a malicious DLL in the same folder as the application, triggering code execution when the software attempts to load the library.

Successful exploitation of this vulnerability grants an attacker the ability to execute arbitrary code with the privileges of the application. This could lead to a complete system compromise, unauthorized data access, or the deployment of persistent malware. With a CVSS score of 7.8, this flaw represents a significant risk to the integrity and availability of host systems running the console.

Immediate Action: Update the RemoteView PC Application Console to version 6.0.2 or later immediately to resolve the vulnerable search path behavior.

Proactive Monitoring: Monitor system logs for unexpected file creation events in application directories or anomalous process execution patterns originating from the RemoteView installation path.

Compensating Controls: Restrict write permissions on application installation directories to prevent unauthorized users from placing malicious DLL files in the search path.

Public Exploit Available: exploit_available (false)

The risk posed by this uncontrolled search path vulnerability is severe due to the potential for full code execution. Administrators should prioritize the deployment of the vendor-supplied patch to version 6.0.2 or higher across all affected endpoints to eliminate the attack surface. If immediate patching is not feasible, restrict directory access to ensure unauthorized users cannot drop malicious files.