CVE-2023-50702: Sikkasoft Platform Utility

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged users have write access to %PROGRAMDATA%\SSCService). Consequently, low-privileged users can execute arbitrary code as LocalSystem.

Affected products

• Sikkasoft Platform Utility: version 5_2023-09-14 only

Published 2024-03-26. Last modified 2026-06-17.