CVE-2023-32659

SUBNET PowerSYSTEM Center (PowerSYSTEM Center) versions 2020 U10 and prior are affected by CVE-2023-32659, a cross-site scripting (CWE-79) vulnerability in report header graphic file handling. The issue arises from improper input neutralization during web page generation, enabling an attacker to ...

CVE-2023-29158

SUBNET PowerSYSTEM Center (PS Center) versions 2020 U10 and earlier are affected by CVE-2023-29158, a replay-capable authentication bypass flaw (capture-replay) that may lead to denial of service or loss of data integrity. Impacted component: PS Center authentication flow; root cause: replay atta...

CVE-2023-6631

CVE-2023-6631 affects Subnet Solutions PowerSYSTEM Center (PowerSYSTEM Center 2020 Update 16 and earlier; 5.0.x–5.16.x). The vulnerability is an unquoted search path/element in the service path that authorized local users can abuse to insert arbitrary code and achieve privilege escalation. Affect...