CVE-2023-54337

CRITICAL 9.1

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.

CWE	CWE-1284
Vendor	sysax
Product	sysax multi server
Published	Jan 13, 2026
Last Updated	Mar 5, 2026

Stay Ahead of the Next One

Get instant alerts for sysax sysax multi server

Be the first to know when new critical vulnerabilities affecting sysax sysax multi server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Affected Versions

Sysax / Sysax Multi Server

6.95

References

NVD ↗ CVE.org ↗ EPSS Data ↗

exploit-db.com: https://www.exploit-db.com/exploits/51066 sysax.com: https://www.sysax.com/ vulncheck.com: https://www.vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc

Credits

Luis Martinez