Filtered by vendor Stonefly Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-31947 1 Stonefly 1 Storage Concentrator 2025-03-14 6.5 Medium
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows Directory Traversal by authenticated users. Using a crafted path parameter with the Online Help facility can expose sensitive system information.
CVE-2024-30213 1 Stonefly 1 Storage Concentrator 2024-11-21 8.8 High
StoneFly Storage Concentrator (SC and SCVM) before 8.0.4.26 allows remote authenticated users to achieve Command Injection via a Ping URL, leading to remote code execution.