| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | exploitation_technique | T1068 | Exploitation for Privilege Escalation |
Comments
A deserialization vulnerability in Trimble Cityworks versions before 15.8.9 (and Cityworks with Office Companion versions prior to 23.10) can be exploited by attackers using maliciously crafted serialized objects to the server, ending with escalated privileges permitting the execution remote code against a target's Microsoft IIS web server.
References
|
| CVE-2025-0994 | Trimble Cityworks Deserialization Vulnerability | primary_impact | T1059 | Command and Scripting Interpreter |
Comments
A deserialization vulnerability in Trimble Cityworks versions before 15.8.9 (and Cityworks with Office Companion versions prior to 23.10) can be exploited by attackers to execute remote code against a target web server.
References
|