Skip to content
OpenAdvisories

Vendor

GE Gas Power

4 known vulnerabilities.

Products

WorkstationST 2 ToolBoxST 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2023-1552

    ToolboxST Deserialization of Untrusted Configuration Data

    ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deser…

    GE Gas Power ToolBoxST
  • Medium 4.7
    CVE-2022-37952

    WorkstationST - Reflected XSS in iHistorian Data Display Tags

    A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering at…

    GE Gas Power WorkstationST
  • Medium 4.7
    CVE-2022-37953

    WorkstationST - Response Splitting in AM Gateway Challenge-Response

    An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments…

    GE Gas Power WorkstationST