In OSIsoft PI System multiple products and versions a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level resulting in unauthorized information disclosure deletion or modification.