High severity · published Jul 29, 2024
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
SKYSEA Client View · Sky Co.,LTD.
Ver.3.013.00 to Ver.19.210.04e · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-41143
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-41143
Third Party Advisory
https://jvn.jp/en/jp/JVN84326763/
Vendor Advisory
https://www.skyseaclientview.net/news/240729_02/
More from SKYSEA Client View
9.8
CVE-2016-7836
SKYSEA Client View Improper Authentication Vulnerability
8.5
CVE-2026-68959
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability
8.5
CVE-2026-68062
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability
8.5
CVE-2026-68960
A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager
7.8
CVE-2026-66109
A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager