Skip to content
OpenAdvisories
Medium ICSA-25-100-08 2 CVEs

Subnet Solutions PowerSYSTEM Center

Published Apr 10, 2025 · Updated May 6, 2025 · Revision 2

Vendor: Subnet Solutions Product: PowerSYSTEM Center 2020

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Vulnerabilities 2

  • Medium 6.2
    CVE-2025-31935

    Subnet Solutions PowerSYSTEM Center Deserialization of Untrusted Data

    Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition.

    Subnet Solutions PowerSYSTEM Center 2020
  • Medium 4.3
    CVE-2025-31354

    Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read

    Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.

    Subnet Solutions PowerSYSTEM Center 2020

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Initial Publication

References