PT-2025-9845 · Unknown · Sysax Multi Server

Publicado 2025-03-05 · Atualizado 2025-03-07 · CVE-2024-53458

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Sysax Multi Server version 6.99

Description The issue is a denial of service (DoS) condition that occurs when the software processes specially crafted SSH packets. This can lead to a disruption in service, making the system unavailable.

Recommendations For Sysax Multi Server version 6.99, consider disabling SSH packet processing until a patch is available to prevent the denial of service condition. Restrict access to the SSH service to minimize the risk of exploitation.

Exploit

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2024-53458

Produtos afetados

Sysax Multi Server

Referências · 7

• 🔥 https://packetstorm.news/files/id/182468 · Exploit
• 🔥 https://packetstormsecurity.com/files/182468/Sysax-Multi-Server-6.99-SSH-Denial-Of-Service.html · Exploit
• https://t.me/cvedetector/19648 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2024-53458 · Aviso do Fabricante
• https://twitter.com/cybercronai/status/1897912729060475379 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2024-53458 · Nota de Segurança
• https://twitter.com/CVEnew/status/1897506961442132069 · Publicação no Twitter