CVE-2022-32268: StarWind SAN and NAS v0.2 build 1914 allow remote code execution

This month

HIGH 8.8DOWNGRADE

CVE-2022-32268 is a high-severity flaw (CVSS 8.8) affecting starwind san \& nas. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST command, which allows changing the hostname, doesn’t check a new hostname parameter. It goes directly to bash as part of a script. An attacker with non-root user access can inject arbitrary data into the command that will be executed with root privileges.

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	8.8 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	2.4% (top 16%)
CISA exploited list	No
Published	2022-06-03
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: starwindsoftware

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2022-06-03 06:15 UTCPublished CVE record published
2026-06-17 04:47 UTCUpdated Record last modified

starwindsoftware starwind san \& nas DOWNGRADE

Affected: 0.2 build_1914

Fixed in: no fixed release known

Safe to downgrade to: a release before 0.2

1. Check installed version

apt-cache policy starwind-san--nas || rpm -q starwind-san--nas || starwind-san--nas --version

2. No fixed release: DOWNGRADE to a release before 0.2 (Debian / Ubuntu)

apt-cache madison starwind-san--nas sudo apt install starwind-san--nas=<VERSION_BEFORE_0.2> sudo apt-mark hold starwind-san--nas

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list starwind-san--nas sudo dnf downgrade starwind-san--nas-<VERSION_BEFORE_0.2> sudo dnf versionlock add starwind-san--nas

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2022-32268?

starwind san \& nas: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2022-32268 being exploited?

CVE-2022-32268 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2022-32268 affect?

CVE-2022-32268 affects starwind san \& nas. Severity is high (CVSS 8.8). StarWind SAN and NAS v0.2 build 1914 allow remote code execution. A flaw was found in REST API in StarWind Stack. REST command, which allows changing the hostname, doesn’t check a new hostname parameter. It goes directly to bash as part of

How urgent is CVE-2022-32268?

Priority 52/100. High severity

Related CVEs

CVE-2021-42739 MEDIUM 6.7 UPGRADE MITIGATE The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/fire
CVE-2020-25704 MEDIUM 5.5 UPGRADE MITIGATE A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVE

References

← Back to latest CVEs