CVE-2023-54337
Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
- State
- Published
- Severity
- 5.1 Medium
- Published
- Jan 13, 2026
- Updated
- Mar 5, 2026
- Reserved
- Jan 10, 2026
Description
Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H | VulnCheck |
Weaknesses
- CWE-1284 Improper Validation of Specified Quantity in Input
Affected Products
| Product | Versions |
|---|---|
Sysax Multi ServerSysax |
|
References
- ExploitDB-51066exploit
- Vendor Homepageproduct
- VulnCheck Advisory: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.