Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) | Advisories

Advisories

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

severity: medium
date: January 13, 2026
Affecting: Sysax Multi Server 6.95
CVE: CVE-2023-54337
CWE: CWE-1284 Improper Validation of Specified Quantity in Input
CVSS: 5.1
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References: ExploitDB-51066
Vendor Homepage
Credit: Luis Martinez
Description: Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.