CVE-2022-37953 WorkstationST - Response Splitting in AM Gateway Challenge-Response
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2022-37953?
CVE-2022-37953 is a medium-severity vulnerability in GE Gas Power WorkstationST, published on 25 Aug 2022.
Official description
An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
Weakness: CWE-113
Which versions are affected by CVE-2022-37953?
It affects 1 product.
Products include Ge Workstationst.
How do I fix CVE-2022-37953?
No fix has been published for CVE-2022-37953 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-37953 being exploited?
There is no known exploitation of CVE-2022-37953 in the wild and no public exploit code.
Other vulnerabilities in GE Gas Power WorkstationST
Sources
Also known as GHSA-pjgf-vwqm-hxw7.