PT-2026-2427 · Unknown · Sysax Multi Server

Luis Martinez · Publicado 2026-01-13 · Atualizado 2026-01-14 · CVE-2023-54337

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sysax Multi Server version 6.95

Description Sysax Multi Server version 6.95 contains a denial of service condition in the administrative password field. An attacker can overwrite the password field with 800 bytes of repeated characters, causing the application to crash and disrupting server functionality. The vulnerable field is the administrative password field.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, limit the length of the administrative password field to prevent the input of 800 repeated characters.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-1284

Identificadores relacionados

CVE-2023-54337

Produtos afetados

Sysax Multi Server

Referências · 6

• 🔥 https://exploit-db.com/exploits/51066 · Exploit
• 🔥 https://vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc · Exploit
• https://osv.dev/vulnerability/CVE-2023-54337 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-54337 · Nota de Segurança
• https://sysax.com · Nota
• https://twitter.com/CVEnew/status/2011383039314599964 · Publicação no Twitter