Trimble Cityworks (Update A)
Advisory ansehen veröffentlicht 2025-02-06
Successful exploitation of this vulnerability could allow an authenticated user to perform a remote code execution.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-0994US | high8.8OT kritisch | KEV | ||
Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authen… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-037-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-037-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (3)
- MitigationCityworks
For more information, see Trimble's notification.
https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0? - MitigationCityworks with office companion
For more information, see Trimble's notification.
https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0? - BehobenCityworks
Cityworks has released the following update guidance for users:
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan