First published: Sun Feb 06 2022(Updated: )
A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Starwindsoftware Iscsi San | <3.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this flaw is CVE-2007-20001.
The severity of CVE-2007-20001 is high with a CVSS score of 7.5.
The StarWind iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20 is affected by CVE-2007-20001.
An attacker can script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, leading to denial of service.
It is recommended to update to a version beyond 3.5 to mitigate the CVE-2007-20001 vulnerability.