CVE-2025-3223

{"id": "CVE-2025-3223", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "GEPowerCVD@ge.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 1.2}]}, "published": "2025-05-19T21:15:22.270", "references": [{"url": "https://www.gevernova.com/content/dam/cyber_security/global/en_US/pdfs/2024-09-24_EGD_Config_Server_File_Overwrite.pdf", "source": "GEPowerCVD@ge.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "GEPowerCVD@ge.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server modules) allows Path Traversal.This issue affects WorkstationST: WorkstationST V07.10.10C and earlier."}, {"lang": "es", "value": "La vulnerabilidad de limitaci\u00f3n incorrecta de una ruta de acceso a un directorio restringido ('Path Traversal') en GE Vernova WorkstationST en Windows (m\u00f3dulos EGD Configuration Server) permite Path Traversal. Este problema afecta a WorkstationST: WorkstationST V07.10.10C y anteriores."}], "lastModified": "2025-05-21T20:25:16.407", "sourceIdentifier": "GEPowerCVD@ge.com"}