The vulnerability involves improper limitation of a pathname to a restricted directory ('Path Traversal') in SKYSEA Client View and SKYMEC IT Manager. Exploitation requires an attacker to have login access to a Windows system with the affected product installed. The attacker may then execute arbitrary code on a second Windows system that also runs the affected software and can receive UDP packets from the first system. This issue is a result of an incomplete remediation of CVE-2024-41726.

Successful exploitation can lead to arbitrary code execution on a remote Windows system running the affected products, potentially compromising confidentiality, integrity, and availability of that system. The vulnerability requires low privileges (login access) on one system but can impact another system over the network. The CVSS score of 8.5 reflects high impact with network attack vector, high confidentiality, integrity, and availability impact, but requires high attack complexity and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is indicated in the provided data. Users should monitor vendor communications for updates and apply patches once available.