SCCM

Microsoft Configuration Manager (the current product name for the platform historically called SCCM) is an endpoint-management system for deploying applications, updates, and operating systems and running real-time actions on managed devices. An operator with the relevant site and collection permissions can misuse application deployments or approved Run Scripts to execute code on managed endpoints; Run Scripts execute under the target client's system or computer account. This is abuse of administrative capability, not an inherent vulnerability, and impact depends on role scope, target collections, and deployment policy.