CVE-2024-41139 Privilege escalation in SKYSEA Client View

High 7.8 Published 29 Jul 2024 Updated 12 Aug 2024

A local attacker can execute arbitrary code with SYSTEM privileges by placing a malicious DLL in a specific folder on the client machine.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-41139?

CVE-2024-41139 is a high-severity vulnerability in SKYSEA Client View, published on 29 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.

Weakness: CWE-266

Which versions are affected by CVE-2024-41139?

It affects 1 product.

Products include Skygroup Skysea Client View.

How do I fix CVE-2024-41139?

No fix has been published for CVE-2024-41139 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-41139 being exploited?

There is no known exploitation of CVE-2024-41139 in the wild and no public exploit code.

Sources

Also known as GHSA-j4gx-xfw8-qq8h.