ICS Advisory: SUBNET Substation Server

Here is a summary of the provided View CSAF document:

Summary

The View CSAF document reports a vulnerability in the Substation Server product by Subnet Solutions Inc., which affects versions prior to 2.23.10. The vulnerability is due to the reliance on insufficiently trustworthy components (CWE-1357) and has a CVSS v4 score of 8.6. Successful exploitation could lead to privilege escalation, denial-of-service, or arbitrary code execution. The vulnerability is not exploitable remotely and no public exploitation has been reported. Subnet Solutions has fixed the issue by updating the libraries and users are advised to update to version 2.23.11 or newer. CISA recommends minimizing network exposure, locating control systems behind firewalls, and using secure remote access methods to minimize the risk of exploitation.