Vulnerability in Sky Co.,ltd. Skysea Client View
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.001 (1.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 1.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Sky Co.,ltd. Skysea Client View — versions Ver.3.013.00 to Ver.19.210.04e
- Skygroup Skysea Client View
Weakness classification (CWE)
References
- www.skyseaclientview.net/news/240729_02/ (Vendor Advisory)
- jvn.jp/en/jp/JVN84326763/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2024-41143?
- CVE-2024-41143 is a high-severity vulnerability in Sky Co.,ltd. Skysea Client View, classified under Origin Validation Error. CVSS score: 7.8/10. Published 2024-07-29.
- How severe is CVE-2024-41143?
- High severity. CVSS v3 base score is 7.8 out of 10.