This vulnerability in Siemens SINEC NMS and its User Management Component permits a low-privileged user to modify a configuration file improperly. This modification can cause the system to load malicious dynamic link libraries (DLLs), potentially enabling arbitrary code execution with SYSTEM-level privileges. The issue is categorized as CWE-427, indicating an uncontrolled search path element vulnerability. The CVSS v3.1 base score is 7.8, reflecting high severity with local attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability affects all versions prior to V4.0 SP3 for SINEC NMS and prior to V2.15.2.1 for UMC. No patch or vendor advisory detailing remediation is currently available.

An attacker with low privileges can exploit this vulnerability to execute arbitrary code with SYSTEM privileges by causing the application to load malicious DLLs. This can lead to full system compromise, including complete loss of confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict low-privileged user access to configuration files and monitor for unauthorized modifications. Avoid running the affected software versions in high-risk environments where untrusted users have access.