Subnet Solutions PowerSYSTEM Center
Summary
CISA has issued an alert regarding multiple vulnerabilities in Subnet Solutions PowerSYSTEM Center, specifically affecting versions 2020, 2024, and 2026. Successful exploitation could allow attackers to execute unauthorized SQL commands and access restricted resources.
IFF Assessment
The vulnerabilities described allow attackers to execute unauthorized commands and gain access to restricted resources, posing a significant threat to system security.
Severity
A CVSS score of 9.0 indicates a critical vulnerability. The article mentions 'Incorrect Authorization' and 'SQL Injection' which, combined with a critical rating, suggests a high potential for widespread impact and ease of exploitation.
Defender Context
This alert highlights critical vulnerabilities in industrial control systems (ICS) used in critical infrastructure sectors like energy and manufacturing. Defenders should prioritize patching or applying mitigations for affected Subnet Solutions PowerSYSTEM Center versions immediately, and closely monitor for any signs of unauthorized access or SQL injection attempts.