Subnet Solutions PowerSYSTEM Center

CVE v události 2

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.4.

Jak se o tom psalo 2

1. 4. 11. 2026 · zachyceno 04:00 · NCSC-FI FI

   Vulnerabilities in Subnet Solutions PowerSYSTEM Center

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.4, CVEs: CVE-2026-63017, CVE-2026-63774, Summary: CVE-2026-63017 (CVSS: 9.4): Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators. CVE-2026-63774 (CVSS: 9.4): Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.

2. 3. 11. 2026 · zachyceno 17:30 · CISA Advisories US nadpis události

   Subnet Solutions PowerSYSTEM Center

   View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute unauthorized SQL commands and gain access to unauthorized resources. The following versions of Subnet Solutions PowerSYSTEM Center are affected: PowerSYSTEM Center 2020 <=5.29.x (CVE-2026-63017) PowerSYSTEM Center 2024 >=6.0.x|<=6.2.x (CVE-2026-63017, CVE-2026-63774) PowerSYSTEM Center 2026 >=7.0.x|<=7.1.x (CVE-2026-63017, CVE-2026-63774) CVSS Vendor Equipment v3 9 Subnet Solutions PowerSYSTEM…