CVE-2024-41726

HIGH

SKYSEA Client View 3.013.00-19.210.04e - Authenticated Path Traversal and Arbitrary Code Execution

Title source: llm
STIX 2.1

Description

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed.

References (2)

Core 2
Core References
Third Party Advisory
https://jvn.jp/en/jp/JVN84326763/

Scores

CVSS v3 7.5
EPSS 0.0050
EPSS Percentile 38.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
skygroup/skysea_client_view 15.200.13i - 19.300.09h
Published Jul 29, 2024
Tracked Since Feb 18, 2026