CVE-2013-10065CWE-248

Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS

High · published August 5, 2025

CVSS v4.0
8.7
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a non-standard byte (\x28) in place of the expected SSH protocol delimiter.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.01702 · 77.1th percentile
Weakness
CWE-248 · Uncaught Exception
Published
2025-08-05T20:05Z
EPSS history
Timeline
  • 05 AUG 20:05Z
    Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS
    cvelistv5