Описание
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.
Ссылки
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2024.005.10a (включая)Версия до 21.200.07j (включая)
Одно из
cpe:2.3:a:skygroup:skymec_it_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00112
Низкий
7.8 High
CVSS3
Дефекты
CWE-276
CWE-863
Связанные уязвимости
CVSS3: 7.8
github
4 месяца назад
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.
EPSS
Процентиль: 2%
0.00112
Низкий
7.8 High
CVSS3
Дефекты
CWE-276
CWE-863