What’s Vulnerable › Vulnerabilities
CVE-2025-31354: Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-04-11 · updated 2026-06-17
- Weakness: CWE-125
Description
Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.
Affected products
- Subnet Solutions PowerSYSTEM Center 2020: through 5.24.x
References
Get alerted when CVE-2025-31354 or the next vulnerability affects your stack