CVE-2025-3223

Name of the Vulnerable Software and Affected Versions: GE Vernova WorkstationST versions V07.10.10C and earlier

Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability, in the EGD Configuration Server modules of GE Vernova WorkstationST on Windows. This vulnerability allows Path Traversal.

Recommendations: For GE Vernova WorkstationST versions V07.10.10C and earlier, consider restricting access to the EGD Configuration Server modules until a patch is available. As a temporary workaround, avoid using the vulnerable EGD Configuration Server modules in GE Vernova WorkstationST until the issue is resolved.