CVE-2025-31354 — Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read

CVE-2025-31354

Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read PUBLISHED

Description (CNA)

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.

Affected (CNA)

Vendor / product	Versions
Subnet Solutions / PowerSYSTEM Center 2020	affected 0 through 5.24.x

CWE

CWE-125

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-08

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.