StoneFly vulnerabilities
We track 5 vulnerabilities in StoneFly products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
Latest StoneFly vulnerabilities
- 10.0 Critical severity
Storage Concentrator: Improper Neutralization of Special Elements used in an OS Command
Storage Concentrator (SC & SCVM) contains a command injection vulnerability within the debug.pl script that is reachable without authentication. A remote attacker can submit a specially crafted HTTP request containing a malicious payload that is processed with
- 10.0 Critical severity
Storage Concentrator: Improper Neutralization of Special Elements used in an OS Command
Storage Concentrator (SC & SCVM) contains a command injection vulnerability in the ms_service.pl service, which listens on TCP port 9000 by default and accepts custom network packets to perform device actions. An unauthenticated remote attacker can send a spec
- 9.3 Critical severity
Storage Concentrator: Improper Neutralization of Special Elements used in an SQL Command
Storage Concentrator (SC & SCVM) is vulnerable to SQL injection through cookie values processed by the login.pl and debug.pl scripts. The cookie value is incorporated directly into database queries without adequate sanitization, allowing an unauthenticated rem
- 9.2 Critical severity
Storage Concentrator: Use of Hard-coded Credentials
Storage Concentrator (SC & SCVM) contains hardcoded credentials for numerous internal services embedded within a configuration file. While the credentials are stored in an encoded format, the encoding can be reversed to plaintext. The exposed credentials span
- 8.8 High severity
scvm: Improper Neutralization of Special Elements used in a Command
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injection via a Ping URL, leading to remote code execution.