by Kastro
Paper/Archive/CVE-2023-54337

CVE-2023-54337

Sysax Sysax Multi Server — Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

EPSS 0.5%public exploitCVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 45.2.452 × 209.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.

Affected

ProductAffectedFixed inSource
Sysax Multi Server6.95–CNA

Scores by source

VulnCheck (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
VulnCheck (CNA)5.1CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

exploitexploit-db.com/exploits/51066refsysax.comexploitvulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc