CVE-2024-41139

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41139
Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/jp/JVN84326763/ Third Party Advisory
https://www.skyseaclientview.net/news/240729_02/ Vendor Advisory
https://jvn.jp/en/jp/JVN84326763/ Third Party Advisory
https://www.skyseaclientview.net/news/240729_02/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*
History

04 Jun 2025, 16:54

Type Values Removed Values Added
CPE cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*
First Time Skygroup
Skygroup skysea Client View
References () https://jvn.jp/en/jp/JVN84326763/ - () https://jvn.jp/en/jp/JVN84326763/ - Third Party Advisory
References () https://www.skyseaclientview.net/news/240729_02/ - () https://www.skyseaclientview.net/news/240729_02/ - Vendor Advisory

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://jvn.jp/en/jp/JVN84326763/ - () https://jvn.jp/en/jp/JVN84326763/ -
References () https://www.skyseaclientview.net/news/240729_02/ - () https://www.skyseaclientview.net/news/240729_02/ -

01 Aug 2024, 13:58

Type Values Removed Values Added
CWE CWE-266
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

29 Jul 2024, 14:12

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad de asignación de privilegios incorrecta en SKYSEA Client View Ver.6.010.06 a Ver.19.210.04e. Si un usuario que puede iniciar sesión en el PC donde está instalado el cliente Windows del producto coloca un archivo DLL especialmente manipulado en una carpeta específica, se puede ejecutar código arbitrario con privilegios de SYSTEM.

29 Jul 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-29 09:15

Updated : 2025-06-04 16:54

NVD link : CVE-2024-41139

Mitre link : CVE-2024-41139

CVE.ORG link : CVE-2024-41139

JSON object : View

Products Affected

skygroup

  • skysea_client_view
CWE
CWE-266

Incorrect Privilege Assignment