How severe is CVE-2013-10065?

CVE-2013-10065 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2013-10065 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (63rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2013-10065?

CVE-2013-10065 affects Sysax Multi Server. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2013-10065?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2013-10065 have an EU (EUVD) identifier?

Yes. CVE-2013-10065 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2013-7279.

When was CVE-2013-10065 published?

CVE-2013-10065 was published on 2025-08-05 and last updated on 2026-06-16.

CVE-2013-10065

CVE-2013-10065 is a high-severity vulnerability in Sysax Multi Server with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-248.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v4: 8.7
EPSS exploit prediction: 1% (63rd percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2013-7279
Weakness: CWE-248
Affected product: Sysax Multi Server
Published: 2025-08-05
Last modified: 2026-06-16

Description

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a non-standard byte (\x28) in place of the expected SSH protocol delimiter.

Frequently asked questions

What is CVE-2013-10065?: A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a non-standard byte (\x28) in place of the expected SSH protocol delimiter.
How severe is CVE-2013-10065?: CVE-2013-10065 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2013-10065 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (63rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2013-10065?: CVE-2013-10065 affects Sysax Multi Server. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2013-10065?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2013-10065 have an EU (EUVD) identifier?: Yes. CVE-2013-10065 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2013-7279.
When was CVE-2013-10065 published?: CVE-2013-10065 was published on 2025-08-05 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:sysax:multi_server:6.10:*:*:*:*:*:*:*

More vulnerabilities in Sysax Multi Server

CVE-2012-10060 — Critical (CVSS 9.8): Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote…
CVE-2023-54337 — Critical (CVSS 9.1): Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows…
CVE-2009-4790 — Critical (CVSS 9.0): Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or…
CVE-2020-13229 — High (CVSS 8.8): An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any…
CVE-2024-53458 — High (CVSS 7.5): Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH…
CVE-2012-6530 — High (CVSS 7.1): Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users…

All CVEs affecting Sysax Multi Server →

Other CWE-248 vulnerabilities

CVE-2018-11466 — Critical (CVSS 9.8): A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions),…
CVE-2024-42037 — Critical (CVSS 9.3): Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may…
CVE-2025-53620 — Critical (CVSS 9.2): @builder.io/qwik-city is the meta-framework for Qwik. When a Qwik Server Action QRL is executed it dynamically load the…
CVE-2026-46689 — High (CVSS 8.7): Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/...…
CVE-2026-9509 — High (CVSS 8.7): An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an…
CVE-2025-9124 — High (CVSS 8.7): A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a…

Browse all CWE-248 vulnerabilities →