Trimble Cityworks (Update A)

Summary

Vulnerabilities 1

• High 8.6
  CVE-2025-0994 Exploited Public exploit EPSS 35%

  Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable t…

  Trimble Cityworks (with office companion) Cityworks
  Feb 6, 2025

  KEV Feb 7, 2025

Revision history

1. 2025-02-11 #2

   Update A - Update to the critical infrastructure sectors

2. 2025-02-06 #1

   Initial Publication

References

• ICSA Advisory ICSA-25-037-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B