CVE-2013-20004: Starwindsoftware Iscsi San

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by trying to connect a non-existent target multiple times. This affects iSCSI SAN (Windows Native) Version 6.0, build 2013-01-16.

Affected products

• Starwindsoftware Iscsi San: before 6.0 (fixed in 6.0)

Published 2022-02-06. Last modified 2026-06-16.