CVE-2023-6631 — Subnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element

CVE-2023-6631

Subnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element PUBLISHED

Description (CNA)

PowerSYSTEM Center versions 2020 Update 16 and prior contain a vulnerability that may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges.

Affected (CNA)

Vendor / product	Versions
Subnet Solutions Inc. / PowerSYSTEM Center	affected 2020 v5.0.x through 5.16.x

CWE

CWE-428

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-01
https://subnet.com/contact/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-01
https://subnet.com/contact/

CISA-ADP

No English description supplied.

No references supplied.