Subnet Solutions PowerSYSTEM Center
Advisory ansehen veröffentlicht 2025-04-10
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-31935US | — | — | ||
Subnet Solutions
PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulti… | ||||
| CVE-2025-31354US | — | — | ||
Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consump… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-100-08 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-100-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationPowerSYSTEM Center 2020
Configure PowerSYSTEM Center DCS network firewall to only allow connections to an approved and authorized email server.
- MitigationPowerSYSTEM Center 2020
Configure PowerSYSTEM Center DCS network firewall to only allow connections to an approved and authorized email server.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan