Read the docs

Trimble

Records44All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

Trimble records in CISA KEV
TI-2025-00837 Trimble Cityworks Deserialization Vulnerability Priority CRITICAL 96KEV 2025-02-07

Components

Products in the NVD configurations · select one to filter the records
Sketchup Viewer 27 records LOW Sketchup 11 records MEDIUM Cityworks 1 record CRITICAL Infrastructure Gnss Series Receiver Netr3 1 record LOW Infrastructure Gnss Series Receiver Netr5 1 record LOW Infrastructure Gnss Series Receiver Netr8 1 record LOW Infrastructure Gnss Series Receiver Netr9 1 record LOW Infrastructure Netrs Receiver 1 record LOW

Records

1 record in Cityworks · all components

TI-2025-00837 CVE-2025-0994 · GHSA-m5q8-8x36-w25p

Deserialization of untrusted data in Trimble Cityworks

Priority CRITICAL 96KEV

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.31309 Published 2025-02-06 Fixed in 15.8.9, 23.10 CWE-502
Open these records in search →