Ge Toolboxst vulnerabilities

2 CVEs affecting Ge Toolboxst, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-1552, published 2023-04-11.

More from Ge.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-44477, published 2022-03-25. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary…
• CVE-2023-1552, published 2023-04-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator…