CVE-2025-31354

Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read

State: Published
Severity: 5.3 Medium
Published: Apr 11, 2025
Updated: Apr 11, 2025
Reserved: Apr 8, 2025

Description

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N	icscert
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	icscert

Weaknesses

CWE-125

Affected Products

Product	Versions
PowerSYSTEM Center 2020Subnet Solutions	5.24.x and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-08

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.