CVE-2025-31354CWE-125

Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read

Medium · published April 11, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-04-11T15:30Z
EPSS history
Timeline
  • 11 APR 15:30Z
    Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read
    cvelistv5