SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://www.skyseaclientview.net/news/161221/ | vendor advisory |
https://www.skygroup.jp/security-info/170308.html | exploit third party advisory technical description |
https://jvn.jp/en/jp/JVN84995847/index.html | vdb entry third party advisory |
http://www.securityfocus.com/bid/95062 | vdb entry third party advisory |