CVE-2007-20001

Published: Feb 6, 2022Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.

Affected (1)

Products: Starwindsoftware: Iscsi San

Starwindsoftware

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Starwindsoftware Iscsi San	Before 3.5

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

https://www.starwindsoftware.com/security/sw-20070601-0001/

Source: cve@mitre.org

Vendor Advisory

https://www.starwindsoftware.com/security/sw-20070601-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.