CVE-2024-41143

2024-07-2908:51:04

jpcert

github.com

cve-2024-41143

skysea client view

origin validation error

privilege escalation

windows client

AI Score

7.2

Confidence

High

EPSS

Percentile

9.4%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product’s Windows client is installed.

CNA Affected

[
  {
    "vendor": "Sky Co.,LTD.",
    "product": "SKYSEA Client View",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.3.013.00 to Ver.19.210.04e"
      }
    ]
  }
]