CVE-2023-54337

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

Medium5.1Public exploitEPSS 0.54%

Published: 13 Jan 2026
Updated: 5 Mar 2026
Reserved: 10 Jan 2026
Assigned by: VulnCheck

Description

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.

Public exploit

2 references of the record are tagged as an exploit or proof of concept: anyone can try it against an unpatched system. CISA's SSVC rates its exploitation: a proof of concept is public.

ExploitDB-51066 (opens in a new tab)exploit
VulnCheck Advisory: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) (opens in a new tab)third-party-advisoryexploit

Timeline

2026
10 Jan 2026
10 Jan 2026
ID reserved
By VulnCheck
13 Jan 20263 days later
13 Jan 2026· 3 days later
Published
5 Mar 202651 days later
5 Mar 2026· 51 days later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-54337, by who scored it
Scored by	CVSS	Score	Vector
VulnCheckCNA (assigner)	4.0	Medium5.1	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)	3.1	Critical9.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVDNVD · Modified	4.0	Medium5.1	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS (exploitation in 30 days): 0.54% · top 55% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: poc · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.1.

Weakness

CWE-1284: Improper Validation of Specified Quantity in Input (opens in a new tab)All about CWE-1284 and its CVEs

Affected products

Sysax · Sysax Multi Server
- affected 6.95

References (3)

ExploitDB-51066 (opens in a new tab)exploit
Vendor Homepage (opens in a new tab)product
VulnCheck Advisory: Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC) (opens in a new tab)third-party-advisoryexploit

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-54337](https://trackcve.app/badge/CVE-2023-54337.svg)](https://trackcve.app/cve/CVE-2023-54337)

Record last updated 5 Mar 2026, 01:29 UTC.