CISA Flags Critical Trimble Cityworks Vulnerability (CVE-2025-0994) in KEV Catalog
ID: 2ac4b830-451c-5bbc-aa9d-fb4840d7bdfb
STIX ID: report--2ac4b830-451c-5bbc-aa9d-fb4840d7bdfb
Feed Name: The Cyber Express
Threat Score
CISA added CVE-2025-0994 — a deserialization vulnerability in Trimble Cityworks permitting authenticated remote code execution against IIS-hosted deployments — to its Known Exploited Vulnerabilities catalog; Trimble released security updates for affected Cityworks 15.x (<15.8.9) and Cityworks with Office Companion (<23.10), urged immediate patching, and provided guidance on IIS permissions and attachment directory configuration to mitigate the risk.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.