skygroup records

11 published records for vendor skygroup.

Researcher profile

Entered KEV: 1 · 9.1%
Weaponized: 1 · 9.1%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: 3049 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
75This week	CVE-2016-7836Weaponized	SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection withskygroup · skysea client view · CWE-287 pre-auth RCE Auth bypass	Critical9.8	KEV	19.2%	Jun 9, 2017
34Monitor	CVE-2026-39454No exploit	SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.skygroup · skymec it manager · CWE-276 RCE Local privilege escalation	High8.5	—	0.1%	Apr 20, 2026
31Monitor	CVE-2020-5617No exploit	Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges askygroup · skysea client view · CWE-269 Local privilege escalation	High7.8	—	0.3%	Aug 3, 2020
31Monitor	CVE-2021-20616No exploit	Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privilskygroup · skysea client view · CWE-427 Local privilege escalation	High7.8	—	0.3%	Jan 13, 2021
31Monitor	CVE-2024-21805No exploit	Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2.skygroup · skysea client view · CWE-284 RCE Local privilege escalation Broken access control (IDOR)	High7.8	—	0.2%	Mar 12, 2024
31Monitor	CVE-2024-41139No exploit	Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e.skygroup · skysea client view · CWE-266 RCE Local privilege escalation	High7.8	—	0.1%	Jul 29, 2024
31Monitor	CVE-2024-41143No exploit	Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.skygroup · skysea client view · CWE-346 Local privilege escalation	High7.8	—	0.1%	Jul 29, 2024
30Monitor	CVE-2024-41726No exploit	Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.skygroup · skysea client view · CWE-22 Path traversal	High7.5	—	0.6%	Jul 29, 2024
25Monitor	CVE-2024-40895No exploit	FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticatedffri security, inc. · ffri amc · CWE-78 pre-auth RCE Command injection	Medium6.4	—	0.4%	Jul 30, 2024
25Monitor	CVE-2024-24964No exploit	Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2.skygroup · skysea client view	Medium6.3	—	0.4%	Mar 12, 2024
13Monitor	CVE-2023-39341No exploit	"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to deniffri · dual safe · CWE-755 Denial of service	Low3.3	—	0.2%	Aug 8, 2023

CVE-2016-7836
75This week
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with
CriticalCVSS 9.8KEVWeaponizedEPSS 19%
- pre-auth RCE
- Auth bypass
skygroup · skysea client viewJun 9, 2017
CVE-2026-39454
34Monitor
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
skygroup · skymec it managerApr 20, 2026
CVE-2020-5617
31Monitor
Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges a
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
skygroup · skysea client viewAug 3, 2020
CVE-2021-20616
31Monitor
Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privil
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
skygroup · skysea client viewJan 13, 2021
CVE-2024-21805
31Monitor
Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2.
HighCVSS 7.8No exploitEPSS 0%
skygroup · skysea client viewMar 12, 2024
CVE-2024-41139
31Monitor
Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
skygroup · skysea client viewJul 29, 2024
CVE-2024-41143
31Monitor
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
skygroup · skysea client viewJul 29, 2024
CVE-2024-41726
30Monitor
Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.
HighCVSS 7.5No exploitEPSS 0%
- Path traversal
skygroup · skysea client viewJul 29, 2024
CVE-2024-40895
25Monitor
FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated
MediumCVSS 6.4No exploitEPSS 0%
- pre-auth RCE
- Command injection
ffri security, inc. · ffri amcJul 30, 2024
CVE-2024-24964
25Monitor
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2.
MediumCVSS 6.3No exploitEPSS 0%
skygroup · skysea client viewMar 12, 2024
CVE-2023-39341
13Monitor
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to deni
LowCVSS 3.3No exploitEPSS 0%
- Denial of service
ffri · dual safeAug 8, 2023