SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program
Published Jun 9, 2017 ·Due Nov 4, 2025
9.8
CRITICALCVSS 3.1
EPSS 19.23%
Description
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
Affected products
-
- Version Ver.11.221.03 and earlierStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Sky Co., LTD. | SKYSEA Client View | n/a |
|
- ≤ 11.221.03
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:C/I:C/A:C
Date Added
Oct 14, 2025
Patch Due
Nov 4, 2025
Required Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
ActiveAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Oct 15, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (21 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 19.23% (0.19230) | 97.26th | v5 (v2026.06.15) |
| Jun 15, 2026 | 19.38% (0.19380) | 97.00th | v5 (v2026.06.15) |
| Apr 23, 2026 | 35.70% (0.35703) | 97.09th | v4 (v2025.03.14) |
| Apr 9, 2026 | 46.92% (0.46920) | 97.67th | v4 (v2025.03.14) |
| Mar 12, 2026 | 53.18% (0.53183) | 97.92th | v4 (v2025.03.14) |
| Dec 18, 2025 | 35.34% (0.35342) | 96.88th | v4 (v2025.03.14) |
| Apr 7, 2025 | 37.70% (0.37702) | 96.90th | v4 (v2025.03.14) |
| Mar 30, 2025 | 50.35% (0.50346) | 97.61th | v4 (v2025.03.14) |
| Mar 29, 2025 | 53.18% (0.53182) | 97.04th | v4 (v2025.03.14) |
| Mar 17, 2025 | 49.88% (0.49882) | 97.55th | v4 (v2025.03.14) |
| Dec 17, 2024 | 14.63% (0.14632) | 95.75th | v3 (v2023.03.01) |
| Mar 30, 2024 | 10.78% (0.10778) | 94.97th | v3 (v2023.03.01) |
| Sep 13, 2023 | 9.94% (0.09936) | 94.14th | v3 (v2023.03.01) |
| May 20, 2023 | 13.41% (0.13410) | 94.73th | v3 (v2023.03.01) |
| Apr 19, 2023 | 18.05% (0.18048) | 95.37th | v3 (v2023.03.01) |
| Mar 25, 2023 | 29.31% (0.29309) | 96.20th | v3 (v2023.03.01) |
| Mar 7, 2023 | 36.32% (0.36321) | 96.48th | v3 (v2023.03.01) |
| Mar 6, 2023 | 5.79% (0.05785) | 90.41th | v2 (v2022.01.01) |
| Apr 1, 2022 | 5.79% (0.05785) | 89.45th | v2 (v2022.01.01) |
| Mar 6, 2022 | 5.79% (0.05785) | 77.60th | v2 (v2022.01.01) |
| Feb 4, 2022 | 5.63% (0.05634) | 76.84th | v2 (v2022.01.01) |
References (5)
- http://www.securityfocus.com/bid/95062 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.skyseaclientview.net/news/161221/ x_refsource_CONFIRMVendor Advisory
- https://jvn.jp/en/jp/JVN84995847/index.html third-party-advisoryx_refsource_JVNThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7836 government-resourceUS Government Resource
- https://www.skygroup.jp/security-info/170308.html x_refsource_CONFIRMExploitTechnical DescriptionThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/95062 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| http://www.skyseaclientview.net/news/161221/ | x_refsource_CONFIRMVendor Advisory | |
| https://jvn.jp/en/jp/JVN84995847/index.html | third-party-advisoryx_refsource_JVNThird Party AdvisoryVDB Entry | |
| https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7836 | government-resourceUS Government Resource | |
| https://www.skygroup.jp/security-info/170308.html | x_refsource_CONFIRMExploitTechnical DescriptionThird Party Advisory |
Change history (0)
No recorded changes yet.