Approved changes feed: RSS · Atom

cpe:2.3:a:subnet_solutions:powersystem_center_2020:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSubnet Solutions (656a4e72-c27b-5107-a7fa-897356220e2f)
ProductPowersystem Center 2020 (30966360-7f32-5cc7-93fa-7ced471c23a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-35504 vulnerable 2026-06-08 07:59:14.059306 Subnet Solutions PowerSYSTEM Center CRLF injection
MEDIUM (5.5)
PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.
Published: 2026-05-12T20:19:38.126Z
Updated: 2026-05-12T21:12:55.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33570 vulnerable 2026-06-08 07:59:10.402560 Subnet Solutions PowerSYSTEM Center Incorrect Authorization
MEDIUM (5.7)
PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.
Published: 2026-05-12T20:59:25.911Z
Updated: 2026-05-13T00:19:39.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26289 vulnerable 2026-06-08 07:53:21.482274 Subnet Solutions PowerSYSTEM Center Incorrect Authorization
HIGH (8.2)
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only.
Published: 2026-05-12T21:02:42.509Z
Updated: 2026-05-13T00:19:14.634Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31935 vulnerable 2026-06-08 07:18:58.834795 Subnet Solutions PowerSYSTEM Center Deserialization of Untrusted Data
MEDIUM (6.2)
Subnet Solutions PowerSYSTEM Center is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the API may trigger an exception, resulting in a denial-of-service condition.
Published: 2025-04-11T15:33:08.761Z
Updated: 2025-04-11T16:12:37.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31354 vulnerable 2026-06-08 07:17:02.768444 Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read
MEDIUM (4.3)
Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.
Published: 2025-04-11T15:30:24.676Z
Updated: 2025-04-11T16:13:34.583Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.