Vulnerability Description
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Skygroup | Skysea Client View | >= 11.220.05p, <= 19.101.01a |
References
- https://jvn.jp/en/jp/JVN54451757/Third Party Advisory
- https://www.skyseaclientview.net/news/240307_01/Vendor Advisory
- https://jvn.jp/en/jp/JVN54451757/Third Party Advisory
- https://www.skyseaclientview.net/news/240307_01/Vendor Advisory
FAQ
What is CVE-2024-24964?
CVE-2024-24964 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be e...
How severe is CVE-2024-24964?
CVE-2024-24964 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-24964?
Check the references section above for vendor advisories and patch information. Affected products include: Skygroup Skysea Client View.