Arbitrary Process Execution Vulnerability in SKYSEA Client View
CVE-2024-24964

Currently unrated

Key Information:

Vendor

Sky Co.,ltd.

Status
Skysea Client View
Vendor
CVE Published:
12 March 2024

Badges

📰 News Worthy

What is CVE-2024-24964?

The CVE-2024-24964 vulnerability in SKYSEA Client View allows for improper access control in the resident process, potentially leading to the execution of arbitrary processes with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed. The vulnerability affects versions from Ver.11.220 to Ver.19.2 and could have a significant impact if exploited. As of now, the vulnerability has not been reported as being exploited, and there is no known association with ransomware groups. The vendor, Sky Co.,ltd., has not specified any known exploitations of the vulnerability.

Affected Version(s)

SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2

News Articles

favicon imageはてなブログ

IT資産管理用ツール「SKYSEA Client View」に複数の脆弱性 - TT 脆弱性 Blog

【概要】 公開日 登録日 CVE番号 NVD ベンダー CVSS v3 CWE 脆弱性 備考 2024/03/07 2024/02/27 CVE-2024-24964 NVD SKYSEA - - 2024/03/07 2024/02/27 CVE-2024-21805 NVD SKYSEA - - 【ニュース】 ◆IT資産管理用ツール「SKYSEA Client View」に複数の脆弱性 (Security NEXT, 2024/03/07) https://www.security-next.com/154608

favicon imagegmo-cybersecurity.com

CVE-2024-24964 | CVE情報 | 脆弱性診断（セキュリティ診断）のGMOサイバーセキュリティ byイエラエ

当社エンジニアによって報告された CVE-2024-24964 について公開されました。イエラエセキュリティはWEB・スマートフォンアプリの脆弱性診断(セキュリティ診断)、ペネトレーションテストなどハッカーによる高度なセキュリティサービスをご提供します。

References

https://www.skyseaclientview.net/news/240307_01/
https://jvn.jp/en/jp/JVN54451757/

Timeline

  • Vulnerability published

  • 📰

    First article discovered by gmo-cybersecurity.com

  • Vulnerability Reserved

.