Subnet Solutions PowerSYSTEM Center

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause an integer overflow on the affected device.

CVEs (3)

Remediations

• Subnet Solutions inc. reports that dependencies have been updated and vulnerabilities are to be addressed in PowerSYSTEM Center 2020 Update 23 release.
• Subnet Solutions inc. strongly recommends users update to the latest version. If this is not possible, the following mitigations have been identified:
• Apply application allow-listing to prevent unauthorized executables from running.
• Ensure Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) are enabled within the operating system. Memory protection controls can be enabled via Windows Security. Please refer to this article for reference.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Energy