PT-2025-16128 · Subnet Solutions · Subnet Solutions Powersystem Center

Published 2025-04-11 · Updated 2025-04-11 · CVE-2025-31354

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Subnet Solutions PowerSYSTEM Center (affected versions not specified)

Description: The issue arises when an EC certificate with crafted F2m parameters is imported, affecting the SMTPS notification service. This can lead to excessive CPU consumption during the evaluation of the curve parameters.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-31354

Affected Products

Subnet Solutions Powersystem Center

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-31354 · Security Note
• https://t.me/cvetracker/21437 · Telegram Post
• https://twitter.com/CVEnew/status/1910730077589168573 · Twitter Post
• https://t.me/cvedetector/22781 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-100-08 · Note