Skip to main content

Trimble

31 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2026-9264 May 22, 01:04 CRITICAL PATCH Act Now

Arbitrary command execution and local file theft in Trimble SketchUp 2026 arises from a cross-site scripting flaw in the Dynamic Components component-options window, which renders untrusted data inside an embedded Internet Explorer 11 engine. An attacker who delivers a maliciously crafted SKP model file can inject script that pivots from XSS to running system commands and reading local files. No public exploit has been identified at time of analysis, and EPSS is very low (0.04%), but the technical impact is rated total and a vendor patch is available.

XSS RCE Code Injection Sketchup Trimble
NVD
CVSS 3.1
9.3
EPSS
0.0%
CVE-2025-0994 Feb 06, 16:15 HIGH KEV THREAT Act Now

Trimble Cityworks asset management platform contains a deserialization vulnerability allowing authenticated users to achieve remote code execution on the IIS web server hosting the application.

RCE Deserialization Microsoft Cityworks Trimble
NVD
CVSS 4.0
8.6
EPSS
76.0%
CVE-2025-2024 Mar 07, 20:15 HIGH This Week

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Sketchup Trimble
NVD
CVSS 3.0
7.8
EPSS
0.1%
CVE-2024-7511 Nov 22, 22:15 MEDIUM This Month

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Sketchup Trimble
NVD
CVSS 3.1
5.5
EPSS
0.4%
CVE-2024-7510 Nov 22, 22:15 HIGH This Week

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-7509 Nov 22, 22:15 HIGH This Week

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-7508 Nov 22, 22:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-9731 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9730 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9729 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9728 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9727 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9726 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9725 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9724 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9723 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-9722 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9721 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-9720 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9719 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9718 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9717 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9716 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9715 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-9714 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Viewer Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-9713 Nov 22, 21:15 HIGH This Week

Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-9712 Nov 22, 21:15 HIGH This Week

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Sketchup Trimble
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2013-7388 Jul 01, 17:55 CRITICAL POC Act Now

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Google Sketchup Trimble
NVD
CVSS 2.0
9.3
EPSS
8.0%
CVE-2013-3664 Jul 01, 17:55 CRITICAL POC THREAT Emergency

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 16.6%.

RCE Buffer Overflow Google Sketchup Trimble
NVD
CVSS 2.0
9.3
EPSS
16.6%
CVE-2013-6038 Dec 17, 15:21 MEDIUM This Month

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Sketchup Viewer Trimble
NVD
CVSS 2.0
6.8
EPSS
8.1%
CVE-2012-5053 Mar 07, 00:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Infrastructure Gnss Series Receiver Netr3 Infrastructure Gnss Series Receiver Netr5 Infrastructure Gnss Series Receiver Netr8 Infrastructure Gnss Series Receiver Netr9 +2
NVD
CVSS 2.0
4.3
EPSS
0.3%
CVE-2026-9264
EPSS 0% CVSS 9.3
CRITICAL PATCH Act Now

Arbitrary command execution and local file theft in Trimble SketchUp 2026 arises from a cross-site scripting flaw in the Dynamic Components component-options window, which renders untrusted data inside an embedded Internet Explorer 11 engine. An attacker who delivers a maliciously crafted SKP model file can inject script that pivots from XSS to running system commands and reading local files. No public exploit has been identified at time of analysis, and EPSS is very low (0.04%), but the technical impact is rated total and a vendor patch is available.

XSS RCE Code Injection +2
NVD
CVE-2025-0994
EPSS 76% CVSS 8.6
HIGH KEV THREAT Act Now

Trimble Cityworks asset management platform contains a deserialization vulnerability allowing authenticated users to achieve remote code execution on the IIS web server hosting the application.

RCE Deserialization Microsoft +2
NVD
CVE-2025-2024
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Sketchup Trimble
NVD
CVE-2024-7511
EPSS 0% CVSS 5.5
MEDIUM This Month

Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2024-7510
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-7509
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
CVE-2024-7508
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +2
NVD
CVE-2024-9731
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Sketchup +1
NVD
CVE-2024-9730
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Sketchup +1
NVD
CVE-2024-9729
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9728
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9727
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9726
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Stack Overflow +2
NVD
CVE-2024-9725
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9724
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9723
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9722
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9721
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9720
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2024-9719
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9718
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2024-9717
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Sketchup Viewer Trimble
NVD
CVE-2024-9716
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9715
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9714
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9713
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2024-9712
EPSS 0% CVSS 7.8
HIGH This Week

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +2
NVD
CVE-2013-7388
EPSS 8% CVSS 9.3
CRITICAL POC Act Now

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Google +2
NVD
CVE-2013-3664
EPSS 17% CVSS 9.3
CRITICAL POC THREAT Emergency

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 16.6%.

RCE Buffer Overflow Google +2
NVD
CVE-2013-6038
EPSS 8% CVSS 6.8
MEDIUM This Month

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Sketchup Viewer +1
NVD
CVE-2012-5053
EPSS 0% CVSS 4.3
MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Infrastructure Gnss Series Receiver Netr3 Infrastructure Gnss Series Receiver Netr5 +4
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy