CVE-2013-20004

CVE-2013-20004 describes a denial-of-service vulnerability in StarWind iSCSI SAN (Windows Native) Version 6.0, build 2013-01-16. The flaw stems from the StarWind service not limiting client connections and allocating memory for each attempt. An unauthenticated attacker can exploit this remotely by repeatedly attempting to connect to a non-existent target, leading to memory exhaustion and a denial of service. This vulnerability has a critical CVSS score of 9.8 due to its network attack vector, low complexity, and high impact on availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the CVE has garnered significant community discussion.