{"id":"CVE-2023-54337","state":"PUBLISHED","title":"Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)","description":"Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.","publishedAt":"2026-01-13T22:52:08.992Z","updatedAt":"2026-03-05T01:29:45.147Z","severity":{"score":5.1,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Sysax Sysax Multi Server"],"affected":[{"vendor":"Sysax","product":"Sysax Multi Server","versions":[{"version":"6.95","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/51066","https://www.sysax.com/","https://www.vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc"],"weaknesses":["CWE-1284"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/54xxx/CVE-2023-54337.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-54337","state":"PUBLISHED","datePublished":"2026-01-13T22:52:08.992Z","dateUpdated":"2026-03-05T01:29:45.147Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-01-10T01:51:52.983Z"},"containers":{"cna":{"title":"Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)","descriptions":[{"lang":"en","value":"Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality."}],"affected":[{"vendor":"Sysax","product":"Sysax Multi Server","versions":[{"version":"6.95","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/51066","name":"ExploitDB-51066","tags":["exploit"]},{"url":"https://www.sysax.com/","name":"Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc","name":"VulnCheck Advisory: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":5.1,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1284","lang":"en","description":"Improper Validation of Specified Quantity in Input","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-03-05T01:29:45.147Z"},"datePublic":"2022-10-05T00:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sysax:multi_server:6.95:*:*:*:*:*:*:*"}]}]}],"credits":[{"lang":"en","value":"Luis Martinez","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.exploit-db.com/exploits/51066","tags":["exploit"]},{"url":"https://www.vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-14T15:46:16.057643Z","id":"CVE-2023-54337","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-14T19:17:58.628Z"}}]}}}