Description
PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Subnet Solutions | PowerSYSTEM Center | 2020 v5.0.x – ≤ 5.16.x | — |
Advisories 1
- ICSA-23-353-01 Subnet Solutions Inc. PowerSYSTEM Center CISA ICS & IT advisories · Dec 19, 2023