CVE-2023-54337

Critical

Description

Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application. Attackers can overwrite the password field with 800 bytes of repeated characters to trigger an application crash and disrupt server functionality.

SeverityCritical
CVSS9.1
Exploit probability—
ProductSysax Multi Server
PublishedJan 13, 2026
First seenJan 13, 2026
Weakness typeCWE-1284CWE-1284

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
sysax multi_server6.95—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.