Read the docs
TI-2023-30611 Aliases CVE-2023-54337GHSA-p8c7-9h6j-9wmg

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

Priority MEDIUM 56CWE-1284Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00536 45th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SysaxSysax Multi Server6.95—No fix listedCNA
  • Sysax Multi Server VendorSysax Affected 6.95 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:sysax:multi_server:6.95:*:*:*:*:*:*:*6.95VulnerableSysax
  • cpe:2.3:a:sysax:multi_server:6.95:*:*:*:*:*:*:* Versions 6.95 Vulnerable ·Sysax

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-54337
  2. 2026-10-03 Alias added: GHSA-p8c7-9h6j-9wmg

References

Exploit 1

Other 1

  • TI-2012-05483 Sysax Multi Server < 5.55 SSH Username Buffer Overflow CVSS 4.0CRITICAL 9.3
  • TI-2013-06205 Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS CVSS 4.0HIGH 8.7
  • TI-2024-35807 Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when… CVSS 3.1HIGH 7.5
  • TI-2012-05248 Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled… CVSS 2.0HIGH 7.1
  • TI-2024-35808 Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter. CVSS 3.1MEDIUM 6.1
  • TI-2009-04546 Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote… CVSS 2.0HIGH 9.0
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences