Out-of-bounds Read in Subnet Solutions Powersystem Center 2020
CVE-2025-31354
Subnet Solutions PowerSYSTEM Center's SMTPS notification service can be affected by importing an EC certificate with crafted F2m parameters, which can lead to excessive CPU consumption during the evaluation of the curve parameters.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (1.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Subnet Solutions Powersystem Center 2020 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-31354?
- CVE-2025-31354 is a medium-severity vulnerability in Subnet Solutions Powersystem Center 2020, classified under Out-of-bounds Read. CVSS score: 4.3/10. Published 2025-04-11.
- How severe is CVE-2025-31354?
- Medium severity. CVSS v3 base score is 4.3 out of 10.