An uncontrolled search path vulnerability in the RSUPPORT RemoteCall Remote Support Program allows unauthenticated local attackers to achieve arbitrary code execution.

This vulnerability is categorized as CWE-427, an uncontrolled search path element flaw. An attacker can place a malicious DLL file within the same directory as the affected application, which the software then loads and executes with the privileges of the operator.

Successful exploitation allows an attacker to execute arbitrary code on the host system, potentially leading to full system compromise or the installation of persistent backdoors. Given the CVSS score of 7.8, this vulnerability poses a significant risk to the confidentiality, integrity, and availability of affected operator workstations.

Immediate Action: Upgrade the RemoteCall Remote Support Program (for Operator) to version 5.3.0 or later as provided by the vendor.

Proactive Monitoring: Monitor endpoint logs for suspicious file creation events or unexpected DLL loading patterns within the application directory.

Compensating Controls: Implement strict file system permissions on application installation directories to prevent unauthorized users from creating or modifying files.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a high risk for environments where end users or local actors may have write access to application folders. Security teams must prioritize updating the RemoteCall software to version 5.3.0 across all operator workstations to eliminate the potential for local arbitrary code execution.