SQL Injection Vulnerabilities in PowerSYSTEM Center

What is happening

Several security vulnerabilities have been found in Subnet Solutions' PowerSYSTEM Center. These flaws allow attackers to exploit the system, potentially accessing unauthorized resources through SQL injection.

How the scam works

Attackers take advantage of incorrect authorization and improper handling of SQL commands in the affected software versions. This lets them execute unauthorized actions on the system.

What to do

Users should update to the latest version of PowerSYSTEM Center to secure their systems. If updating is not possible, closely monitor user activities and disable certain browser features to reduce risk.