A Vulnerability in Trimble Cityworks Could Allow for Remote Code Execution

Read Time:33 Second

A vulnerability has been discovered in Trimble Cityworks that could allow for remote code execution. Trimble Cityworks is a system that helps manage the lifecycle of assets for public infrastructure. It uses GIS (geographic information systems) to help with tasks such as permitting, licensing, construction, maintenance, and replacement. Successful exploitation of the of this vulnerability could allow for remote code execution in the context of the system. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Cloudflare Introduces E2E Post-Quantum Cryptography Protections

UK’s Online Safety Act: Ofcom Can Now Issue Sanctions

Researchers Confirm BlackLock as Eldorado Rebrand

Improvements in Brute Force Attacks

US Legislators Demand Transparency in Apple’s UK Backdoor Court Fight

£1M Lost as UK Social Media and Email Account Hacks Skyrocket

Security Database Aims to Empower Non-Profits

Tj-actions Supply Chain Attack Exposes 23,000 Organizations

Free file converter malware scam “rampant” claims FBI

A Vulnerability in Trimble Cityworks Could Allow for Remote Code Execution

rust-zincati-0.0.30-1.fc40

rust-zincati-0.0.30-1.fc41

rust-zincati-0.0.30-1.fc42

bluez-5.80-1.fc42 iwd-3.4-1.fc42 libell-0.74-1.fc42

dotnet9.0-9.0.104-1.fc40

dotnet9.0-9.0.104-1.fc41