Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read & Deserialization Vulnerabilities (CVE-2025-3135)

### Critical Vulnerability Information #### 1. Vulnerability Overview - **Release Date**: April 10, 2025 - **Alert ID**: ICSA-25-100-08 - **Relevant Topics**: Industrial Control System Vulnerabilities, Industrial Control Systems - **CVSS v4 Base Score**: 6.9 - **Exploitability**: Low Attack Complexity - **Vendor**: Subnet Solutions Inc. - **Product**: PowerSYSTEM Center (PSC) 2020 - **Vulnerability Types**: Out-of-bounds Read, Deserialization of Untrusted Data #### 2. Risk Assessment Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition. #### 3. Technical Details ##### 3.1 Affected Products The affected Subnet Solutions products include: - PowerSYSTEM Center 2020: Versions 5.2.x and earlier ##### 3.2 Vulnerability Summary ###### 3.2.1 Out-of-bounds Read (CWE-125) The SMTPS validation service in PowerSYSTEM Center is affected when importing an EC certificate with a forged F2m parameter, which may result in excessive CPU resource consumption during curve parameter evaluation. - **CVE ID**: CVE-2025-3135 - **CVSS v3.1 Base Score**: 4.3 - **CVSS v4 Base Score**: 5.3 ###### 3.2.2 Deserialization of Untrusted Data (CWE-502) PowerSYSTEM Center is affected by improper handling of exceptional conditions. Carefully crafted data passed to the API may trigger exceptions, leading to a denial-of-service condition. - **CVE ID**: CVE-2025-3135 - **CVSS v3.1 Base Score**: 6.2 - **CVSS v4 Base Score**: 6.9 #### 4. Mitigation Measures Subnet Solutions Inc. recommends users upgrade PowerSYSTEM Center (PSC) to the latest versions: - PSC 2020 Update 25 - PSC 2024 If upgrading PSC is not feasible, Subnet Solutions Inc. recommends applying the following mitigations to help reduce risk: - Disable the notification service, email scheduling service, or outgoing email server in notifications/settings. - Configure the PowerSYSTEM Center DCS network firewall to allow connections only to approved and authorized email servers. - Restrict administrator access to the PowerSYSTEM Center DCS operating system. - Monitor user activity logs to ensure users comply with the application’s acceptable use policy. CISA recommends users implement defensive measures to minimize the risk of exploitation, such as: - Minimize network exposure of all control systems and ensure they are not directly accessible from the internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - If remote access is required, use more secure methods such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the latest versions. Also, identify other methods used to connect to control systems.

Goal Reached Thanks to every supporter — we hit 100%!

Subnet Solutions PowerSYSTEM Center Out-of-Bounds Read & Deserialization Vulnerabilities (CVE-2025-3135)

More from this source