CVE-2024-24964

State: Published
Severity: 6.3 Medium
Published: Mar 12, 2024
Updated: Nov 7, 2024
Reserved: Feb 27, 2024

Description

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
SKYSEA Client ViewSky Co.,LTD.	versions from Ver.11.220 prior to Ver.19.2Affected

References

https://www.skyseaclientview.net/news/240307_01/
https://jvn.jp/en/jp/JVN54451757/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.