Lucene search
K

4 matches found

NVD
NVD
added 2022/08/25 6:15 p.m.9 views

CVE-2022-37953

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST v07.09.15 and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantl...

6.1CVSS0.00258EPSS
Exploits0References1
CVE
CVE
added 2022/08/25 5:26 p.m.64 views

CVE-2022-37953

CVE-2022-37953 affects General Electric WorkstationST prior to 07.09.15, with an HTTP response splitting vulnerability in the AM Gateway Challenge-Response dialog. The root cause is improper handling of CRLF sequences in HTTP headers, which could allow an attacker to compromise a victim’s browser...

6.1CVSS5.4AI score0.00258EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/25 5:26 p.m.9 views

CVE-2022-37953 WorkstationST - Response Splitting in AM Gateway Challenge-Response

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST v07.09.15 and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantl...

4.7CVSS6.4AI score0.00258EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/23 9:0 p.m.3 views

CVE-2022-37953

An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST...

6.1CVSS5.8AI score0.00258EPSS
Exploits0References2
Rows per page
Query Builder