Skip to main content

Multi Server CVE-2024-53458

HIGH
Uncontrolled Resource Consumption (CWE-400)
2025-03-05 cve@mitre.org
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Analysis Generated
Mar 28, 2026 - 18:29 vuln.today
PoC Detected
Sep 23, 2025 - 19:12 vuln.today
Public exploit code
CVE Published
Mar 05, 2025 - 18:15 nvd
HIGH 7.5

DescriptionCVE.org

Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.

AnalysisAI

Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets. Affected products include: Sysax Multi Server.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.

CVE-2012-10060 CRITICAL POC
9.3 Aug 13

Sysax Multi Server versions prior to 5.55 contains a stack-based buffer overflow in its SSH service. Rated critical seve

CVE-2012-6530 HIGH POC
7.1 Jan 31

Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users w

CVE-2013-10065 HIGH POC
8.7 Aug 05

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. Rated high severity (CVS

CVE-2023-54337 CRITICAL POC
9.1 Jan 13

Sysax Multi Server 6.95 crashes when the admin password field receives 800 bytes, causing denial of service. PoC availab

CVE-2020-13229 HIGH POC
8.8 Jun 02

An issue was discovered in Sysax Multi Server 6.90. Rated high severity (CVSS 8.8), this vulnerability is remotely explo

CVE-2020-23574 MEDIUM POC
6.5 Aug 19

When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uplo

CVE-2020-13228 MEDIUM POC
6.1 Jun 02

An issue was discovered in Sysax Multi Server 6.90. Rated medium severity (CVSS 6.1), this vulnerability is remotely exp

CVE-2024-53459 MEDIUM POC
5.4 Dec 02

Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter. Rated medium severity (

CVE-2020-13227 MEDIUM POC
5.3 Jun 02

An issue was discovered in Sysax Multi Server 6.90. Rated medium severity (CVSS 5.3), this vulnerability is remotely exp

Share

CVE-2024-53458 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy