CVE-2016-7836

Description

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

Scoring

• CVSS: 9.8 (CRITICAL, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2025-10-14
• Remediation due date: 2025-11-04
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-287
• CWE-287

References

• http://www.securityfocus.com/bid/95062
• http://www.skyseaclientview.net/news/161221/
• https://jvn.jp/en/jp/JVN84995847/index.html
• https://www.skygroup.jp/security-info/170308.html
• http://www.securityfocus.com/bid/95062
• http://www.skyseaclientview.net/news/161221/
• https://jvn.jp/en/jp/JVN84995847/index.html
• https://www.skygroup.jp/security-info/170308.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7836

More from SKYSEA

• No other tracked CVEs for this vendor yet.