What’s Vulnerable › Vulnerabilities

CVE-2021-45389

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-04 · updated 2026-06-17
• Weakness: CWE-287

Description

A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.

Affected products

• Starwind Command Center: 6864
• Starwind San&Nas: 1578

References

• https://www.starwindsoftware.com/security/sw-20211215-0001/
• https://www.starwindsoftware.com/security/sw-20211512-0001/
• https://www.starwindsoftware.com/security/sw-20211215-0001/
• https://www.starwindsoftware.com/security/sw-20211512-0001/

Get alerted when CVE-2021-45389 or the next vulnerability affects your stack