StoneFly Storage Concentrator

This report details a critical vulnerability affecting StoneFly Storage Concentrator versions prior to 8.0.4.29, exposing the system to significant risks including unauthorized access, command execution, and data theft. The vulnerabilities stem from hardcoded credentials, command injection flaws, and SQL injection weak…