CVE-2012-6530

CVE-2012-6530 describes a stack-based buffer overflow vulnerability in Sysax Multi Server versions prior to 5.52, specifically when the HTTP service is enabled. This critical flaw allows remote authenticated users with "create folder" permissions to execute arbitrary code on the affected server. The vulnerability carries a high CVSS score of 7.1, indicating a severe risk due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring authentication and high attack complexity. While not listed in CISA's KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, suggesting a clear path for exploitation, though there is no evidence of active exploitation or significant community discussion.