[ShadowAce]

It's not a really big deal, though--

The attacker needs to have access to the targeted system and they must be able to execute arbitrary code.

So if your systems are already locked down, you should be OK.

[rarestia]

Tell that to PCI-DSS auditors.