CVE-2024-41726

2024-07-2908:51:08

jpcert

github.com

skysea client view

path traversal

vulnerability

executable file

windows client

AI Score

6.5

Confidence

High

EPSS

Percentile

10.5%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product’s Windows client is installed.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:skysea:client_view:*:*:*:*:*:*:*:*"
    ],
    "vendor": "skysea",
    "product": "client_view",
    "versions": [
      {
        "status": "affected",
        "version": "15.200.13i",
        "lessThan": "19.210.04e",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]