Medium · 5.9 CVE-2025-3223 EUVD-2025-15794GHSA-7hp3-hv9v-w85q

WorkstationST EGD Configuration Server Path Traversal Vulnerability

Published May 19, 2025 · Updated May 20, 2025 · Assigned by GE_Vernova

Vendor: GE Vernova Product: WorkstationST Category: ICS / OT

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier.

Affected products

Vendor	Product	Affected	Fixed
GE Vernova	WorkstationST	WorkstationST V07.10.10C and earlier	—

References

https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf