Vulnerability · Published Apr 11, 2025 · Assigned by icscert
CVE-2025-31354Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read
Medium 4.3
In plain English
A medium-severity out-of-bounds read in PowerSYSTEM Center 2020 from Subnet Solutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.1%top 96.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Subnet Solutions | PowerSYSTEM Center 2020 | 0 – through 5.24.x |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L