Subnet Solutions PowerSYSTEM Center Incorrect Authorization

Summary

Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.

Remediation

1. Inventory every Subnet Solutions PowerSYSTEM Center 2020 deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-307-01.json
• Referencehttps://www.cisa.gov/news-events/ics-advisories/icsa-26-307-01