Subnet Solutions PowerSYSTEM Center Unauthorized Deletion Vulnerability in Project Groups

An authorization flaw has been identified in Subnet Solutions PowerSYSTEM Center, specifically within the project group feature. This vulnerability allows an authenticated user with limited permissions to delete project groups without proper authorization. The issue is present in PowerSYSTEM Center versions 2020 through 5.28.x, as well as in the 2024 and 2026 versions.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of project groups, potentially causing disruption in project management and coordination.

Remediation

Users are advised to update to the latest version of PowerSYSTEM Center PSC 2020 Update 29, PSC 2024 Update 2, and PSC 2026 GA Hotfix. For assistance in upgrading, contact a Subnet Solutions System Integration team member or customer support at (403) 270-8885 or support@subnet.com.