CVE-2025-3223 — WorkstationST EGD Configuration Server Path Traversal Vulnerability

CVE-2025-3223

WorkstationST EGD Configuration Server Path Traversal Vulnerability PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier.

Affected (CNA)

Vendor / product	Versions
GE Vernova / WorkstationST	affected WorkstationST V07.10.10C and earlier

CWE

CWE-22

References

https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.