Vulnerability · Published Jan 13, 2026 · Assigned by VulnCheck
CVE-2023-54337Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
Critical 9.1
In plain English
A critical-severity security flaw in Sysax Multi Server from Sysax. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.5%top 54.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sysax | Sysax Multi Server | 6.95 |
Weakness: CWE-1284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
References
- ExploitDB-51066 exploit
- Vendor Homepage product
- VulnCheck Advisory: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) third-party-advisory