Description
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Subnet Solutions | PowerSYSTEM Center 2020 | 5.8.x – ≤ 5.28.x | — |
| Subnet Solutions | PowerSYSTEM Center 2024 | 6.0.x – ≤ 6.1.x | — |
| Subnet Solutions | PowerSYSTEM Center 2026 | 7.0.x | — |
Advisories 1
- ICSA-26-132-02 Subnet Solutions PowerSYSTEM Center CISA ICS & IT advisories · May 12, 2026