CVE-2024-21805: High severity skysea client view vulnerability
Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21805?
CVE-2024-21805 is classified as a high severity vulnerability due to improper access controls.
How do I fix CVE-2024-21805?
To address CVE-2024-21805, upgrade SKYSEA Client View from versions below 19.2 to the latest version.
What are the potential impacts of exploiting CVE-2024-21805?
Exploitation of CVE-2024-21805 can allow unauthorized users to place arbitrary files in a specific folder.
Which versions of SKYSEA Client View are affected by CVE-2024-21805?
SKYSEA Client View versions from Ver.16.100 to prior to Ver.19.2 are affected by CVE-2024-21805.
Who is affected by CVE-2024-21805?
Any organization using the affected versions of SKYSEA Client View is at risk due to CVE-2024-21805.