CVE-2016-7836

SKYSEA Client View versions 11.221.03 and earlier have a flaw in how they verify user credentials when connecting to the management console over TCP. An attacker can bypass authentication and execute arbitrary code remotely on affected systems.

The vulnerability exists in the authentication processing mechanism for TCP connections between SKYSEA Client View and its management console. An unauthenticated attacker can exploit improper credential verification to achieve remote code execution. The attack requires network access to the management console port but does not require valid credentials.