An improper access control vulnerability exists in the program installation folder of NEC Corporation WebSAM Winshare versions 7.5.0 and earlier (excluding 7.3.3), version 7.6.0, and versions 7.7.0 through 7.7.1 on Windows. This flaw allows a locally authenticated low-privileged attacker to execute arbitrary code with SYSTEM privileges by placing a crafted DLL file that is loaded by a SYSTEM-level process.