CVE-2016-7836 SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
CriticalCVSS 9.8
EPSS 19.2%
CISA KEV
added 2025-10-14 · due 2025-11-04
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
CISA Known Exploited Vulnerability
- Date added
- 2025-10-14
- Due date (FCEB)
- 2025-11-04
- Ransomware use
- Unknown
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skygroup skysea client view | <= 11.221.03 | No fix listed |
| Sky Co., LTD. SKYSEA Client View | = Ver.11.221.03 and earlier | No fix listed |
References
- 95062 third-party-advisory vdb-entry
- www.skyseaclientview.net vendor-advisory
- JVN#84995847 third-party-advisory vdb-entry
- www.skygroup.jp exploit technical-description third-party-advisory
- www.cisa.gov government-resource us-government-resource