ABB DataManagerPro 1.x prior to 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
trane tracer sc