CVE-2024-41139

HIGH

SKYSEA Client View 6.010.06-19.210.04e - Privilege Escalation via DLL Placement

Title source: llm
STIX 2.1

Description

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.

References (2)

Core 2
Core References
Third Party Advisory
https://jvn.jp/en/jp/JVN84326763/

Scores

CVSS v3 7.8
EPSS 0.0018
EPSS Percentile 7.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-266
Status published
Products (1)
skygroup/skysea_client_view 6.010.06 - 19.300.09h
Published Jul 29, 2024
Tracked Since Feb 18, 2026