CVE-2021-20616

HIGH

SKYSEA Client View <16.001.01g - Privilege Escalation

Title source: llm

Description

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://www.skyseaclientview.net/news/210112_01/

Third Party Advisory x_refsource_misc

https://jvn.jp/en/jp/JVN69635538/index.html

Scores

CVSS v3 7.8

EPSS 0.0032

EPSS Percentile 23.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-427

Status published

Products (1)

skygroup/skysea_client_view 1.020.05b - 16.001.01g

Published Jan 13, 2021

Tracked Since Feb 18, 2026