Fuji Electric Energy Savings Estimator

An attacker with local access to an engineering workstation could trick a user into loading a malicious library file, allowing the attacker to run arbitrary code with the same permissions as the Energy Savings Estimator application.

Energy managers and engineers at electric utilities and energy service companies who use Fuji Electric's Energy Savings Estimator tool on engineering workstations.

An attacker creates a malicious DLL file and places it in a location where the Energy Savings Estimator application searches for libraries (likely via social engineering or physical access). When the application runs, it loads the malicious DLL and executes the attacker's code. This requires the attacker to have local system access and user interaction to trigger the vulnerable code path.