Sky Co.,Ltd. vulnerabilities
6 vulnerabilities
Known vulnerabilities in Sky Co.,Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Skysea Client View6 vulnerabilities
- Skymec IT Manager1 vulnerabilities
HighCVE-2024-21805sky co.,ltd. · skysea client view +1 moresky co.,ltd. skysea client viewImproper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.EPSS0.24%HighCVE-2024-41726sky co.,ltd. · skysea client view +1 moresky co.,ltd. skysea client viewPath traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed.EPSS0.62%HighCVE-2024-41139sky co.,ltd. · skysea client view +1 moresky co.,ltd. skysea client viewIncorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.EPSS0.18%HighCVE-2024-41143sky co.,ltd. · skysea client view +1 moresky co.,ltd. skysea client viewOrigin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.EPSS0.12%MediumCVE-2024-24964sky co.,ltd. · skysea client view +1 moresky co.,ltd. skysea client viewImproper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.EPSS0.41%HighCVE-2026-39454sky co.,ltd. · skymec it manager +3 moresky co.,ltd. skymec it managerSKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.EPSS0.15%