Critical SQL Injection Flaws Found in Subnet Solutions PowerSYSTEM Center
Two critical SQL injection vulnerabilities affect Subnet Solutions PowerSYSTEM Center versions 2020, 2024, and 2026, enabling authenticated users to execute unauthorized commands and access restricted resources.
Why it matters
These vulnerabilities threaten the security of industrial control systems crucial to essential sectors, increasing the risk of unauthorized access and operational disruption if unaddressed.
SOC impact
Monitor authentication logs and system activity for signs of unusual command execution or access to restricted resources. Identify and inventory affected PowerSYSTEM Center versions to assess organizational exposure. Validate deployment of recommended mitigations as outlined by the vendor and referenced in CISA advisories.
Recommended actions
- Identify assets running Subnet Solutions PowerSYSTEM Center versions 2020, 2024, and 2026
- Review authentication and command logs for suspicious activity
- Consult the official vendor advisory and CISA ICS advisory for mitigation guidance
- Confirm application of vendor-recommended updates or mitigations
- Monitor network telemetry for unusual access patterns to affected systems
Executive Summary
Subnet Solutions has disclosed two critical SQL injection vulnerabilities in their PowerSYSTEM Center software versions 2020, 2024, and 2026. These flaws permit authenticated users to execute unauthorized commands and access resources typically restricted within industrial control environments. Given the use of PowerSYSTEM Center in essential infrastructure sectors, these vulnerabilities elevate the risk profile for operational disruptions and unauthorized system manipulation. Security teams must promptly identify affected deployments, review relevant logs for anomalous activities, and apply or verify the implementation of vendor-recommended mitigating controls as detailed in the associated CISA advisory.
SOC Impact
Monitor authentication logs and system activity for signs of unusual command execution or access to restricted resources. Identify and inventory affected PowerSYSTEM Center versions to assess organizational exposure. Validate deployment of recommended mitigations as outlined by the vendor and referenced in CISA advisories.
Asset Identification and Activity Monitoring
- Identify assets running Subnet Solutions PowerSYSTEM Center versions 2020, 2024, and 2026
- Review authentication and command logs for suspicious activity
- Consult the official vendor advisory and CISA ICS advisory for mitigation guidance
- Confirm application of vendor-recommended updates or mitigations
- Monitor network telemetry for unusual access patterns to affected systems
Why It Matters
These vulnerabilities threaten the security of industrial control systems crucial to essential sectors, increasing the risk of unauthorized access and operational disruption if unaddressed.