critical9.8Known exploited
CVE-2016-7836
SKYSEA Client View Improper Authentication Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2025-10-14. Federal due date: 2025-11-04.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Skygroup | Skysea Client View | through 11.221.03 |