CISA Known Exploited Vulnerability

CVE-2016-7836

SKYSEA · Client View

SKYSEA Client View Improper Authentication Vulnerability

Date added
BOD 22-01 due date
CWE CWE-287
Ransomware Unknown

CISA description

SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.