CVE-2025-0220

Summary

CVE-2025-0220 represents a recently disclosed vulnerability affecting the Trimble SPS851 488.01 software. The issue lies within the Ethernet Configuration Menu, and specifically, the Hostname argument. An attacker can exploit this vulnerability through cross-site scripting, enabling them to execute malicious code. Remotely initiated attacks are possible, increasing the potential threat. Though the vendor was informed of the disclosure, they have not yet responded or taken any action to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.