SUBNET PowerSYSTEM Center
view advisory published 2023-06-15
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious scripts or perform a denial-of-service type attack.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32659US | medium6.1 | — | ||
SUBNET PowerSYSTEM Center versions 2020 U10 and prior contain a cross-site scripting vulnerability that may allow an attacker to inject malicious code into report header graphic f… | ||||
| CVE-2023-29158US | critical9.1OT elevated | — | ||
SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity.
| ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-23-166-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-23-166-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedPowerSYSTEM Center
Deny users to run other executables on client access servers (PowerSYSTEM Center front end access point).
- FixedPowerSYSTEM Center
Deny users to run other executables on client access servers (PowerSYSTEM Center front end access point).
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan