Medium severity · published Mar 12, 2024
CVE-2024-24964
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SKYSEA Client View · Sky Co.,LTD.
versions from Ver.11.220 prior to Ver.19.2 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-24964
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-24964
Third Party Advisory
https://jvn.jp/en/jp/JVN54451757/
Vendor Advisory
https://www.skyseaclientview.net/news/240307_01/
More from SKYSEA Client View
9.8
CVE-2016-7836
SKYSEA Client View Improper Authentication Vulnerability
8.5
CVE-2026-68959
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability
8.5
CVE-2026-68062
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability
8.5
CVE-2026-68960
A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager
7.8
CVE-2026-66109
A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager