{"schema":"vulnpedia.research/1","cve":"CVE-2025-0994","references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04","tags":["government-resource","third-party-advisory","Third Party Advisory","US Government Resource","KEV report"],"source":"mitre","sourceId":"icscert","modified":"2025-02-06T16:55:26.352Z","origins":[{"source":"mitre","sourceId":"icscert","modified":"2025-02-06T16:55:26.352Z","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04"},{"source":"nvd","sourceId":"CVE-2025-0994","modified":"2026-06-17T08:27:29.190","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04"},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04"}]},{"url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?","tags":["vendor-advisory","Vendor Advisory"],"source":"mitre","sourceId":"icscert","modified":"2025-02-06T16:55:26.352Z","origins":[{"source":"mitre","sourceId":"icscert","modified":"2025-02-06T16:55:26.352Z","url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?"},{"source":"nvd","sourceId":"CVE-2025-0994","modified":"2026-06-17T08:27:29.190","url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0994","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:55:30.136Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T22:55:30.136Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0994"},{"source":"nvd","sourceId":"CVE-2025-0994","modified":"2026-06-17T08:27:29.190","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0994"}]},{"source":"euvd","sourceId":"EUVD-2025-1955","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1955","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2025-1955","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1955"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-06-docx/0?","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-06-docx/0?"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.recordedfuture.com/blog/trimble-cityworks-cve-2025-0994-vulnerability-analysis","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.recordedfuture.com/blog/trimble-cityworks-cve-2025-0994-vulnerability-analysis"}]},{"url":"https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/"}]},{"url":"https://fortiguard.fortinet.com/threat-signal-report/5997","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://fortiguard.fortinet.com/threat-signal-report/5997"}]},{"url":"https://www.broadcom.com/support/security-center/protection-bulletin/tetraloader-distributed-in-the-uat-6382-campaign","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.broadcom.com/support/security-center/protection-bulletin/tetraloader-distributed-in-the-uat-6382-campaign"}]},{"url":"https://www.darktrace.com/blog/2025-cyber-threat-landscape-darktraces-mid-year-review","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.darktrace.com/blog/2025-cyber-threat-landscape-darktraces-mid-year-review"}]},{"url":"https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-2025-0828.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-2025-0828.pdf"}]},{"url":"https://hs-21289959.f.hubspotemail.net/hubfs/21289959/Annual%20Threat%20Landscape%20Report_2025.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://hs-21289959.f.hubspotemail.net/hubfs/21289959/Annual%20Threat%20Landscape%20Report_2025.pdf"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"url":"https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf"}]},{"url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report"}]},{"url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/rxerium/CVE-2025-0994","source":"poc-in-github","sourceId":"CVE-2025-0994","description":"Cityworks deserialization of untrusted data vulnerability Detection","modified":"2025-10-14T06:46:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-0994","url":"https://github.com/rxerium/CVE-2025-0994"},{"source":"poc-in-github","sourceId":"CVE-2025-0994","modified":"2025-10-14T06:46:15Z","url":"https://github.com/rxerium/CVE-2025-0994"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2025-02-06T00:00:00Z","modified":"2025-02-06T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Trimble","product":"Cityworks","dueDate":"2025-02-28T00:00:00Z","cisaDateAdded":"2025-02-07T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","modified":"2025-02-06T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04","dateAdded":"2025-02-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-06-docx/0?","dateAdded":"2025-02-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-06-docx/0?"},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/trimble-cityworks-cve-2025-0994-vulnerability-analysis","dateAdded":"2025-02-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.recordedfuture.com/blog/trimble-cityworks-cve-2025-0994-vulnerability-analysis"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/","dateAdded":"2025-05-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/threat-signal-report/5997","dateAdded":"2025-05-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://fortiguard.fortinet.com/threat-signal-report/5997"},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.broadcom.com/support/security-center/protection-bulletin/tetraloader-distributed-in-the-uat-6382-campaign"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://www.darktrace.com/blog/2025-cyber-threat-landscape-darktraces-mid-year-review","dateAdded":"2025-08-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.darktrace.com/blog/2025-cyber-threat-landscape-darktraces-mid-year-review"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-2025-0828.pdf","dateAdded":"2025-08-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://assets.recordedfuture.com/insikt-report-pdfs/2025/cta-2025-0828.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://hs-21289959.f.hubspotemail.net/hubfs/21289959/Annual%20Threat%20Landscape%20Report_2025.pdf","dateAdded":"2026-01-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://hs-21289959.f.hubspotemail.net/hubfs/21289959/Annual%20Threat%20Landscape%20Report_2025.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf","dateAdded":"2026-02-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://5943619.hs-sites.com/hubfs/312-Year-in-Review/2026/Dragos-2026-OT-Cybersecurity-Report-A-Year-in-Review.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report","dateAdded":"2026-02-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://wwv.vulncheck.com/2026-vulncheck-exploit-intelligence-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","catalog":"VulnCheck KEV","kind":"report","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf","dateAdded":"2026-02-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2025-0994","url":"https://cdn.prod.website-files.com/626ff19cdd07d1258d49238d/699db1ba8d377a68f7d697b7_Threat%20Report%202026%20v4.pdf"}]}]}