Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-31354 EUVD-2025-10826GHSA-p288-3mcf-2f3w

Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read

Published Apr 11, 2025 · Updated Apr 11, 2025 · Assigned by icscert

Description

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.

Affected products

VendorProductAffectedFixed
Subnet Solutions PowerSYSTEM Center 2020 ≤ 5.24.x —

Advisories 1

References