H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-02-07
Last seen2025-02-07

Confidence

—

Trimble Cityworks contains a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet Information Services (IIS) web server.

Labels

exploitedkev

CISA KEV context

Vendor / productTrimble Cityworks
Added2025-02-07
Due date2025-02-28
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2025-0994
open
cwe
CWE-502
open