CVE-2024-21805

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-12 · updated 2026-06-17
Weakness: CWE-284

Description

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.

Affected products

Sky Co., LTD. SKYSEA Client View: from 16.100.06f before 19.300.09h — fixed in 19.300.09h

How to fix

Upgrade to a fixed version: Sky Co., LTD. SKYSEA Client View 19.300.09h. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-21805 or the next vulnerability affects your stack