CVE-2025-0220: Trimble SPS851 Ethernet Configuration Menu cross site scripting
A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0220?
CVE-2025-0220 is classified as a problematic vulnerability affecting the Trimble SPS851.
How do I fix CVE-2025-0220?
To fix CVE-2025-0220, ensure that the Ethernet Configuration Menu is updated to the latest firmware provided by Trimble.
What type of attack is possible with CVE-2025-0220?
CVE-2025-0220 allows for cross-site scripting attacks initiated remotely through manipulation of the Hostname argument.
Which component is affected by CVE-2025-0220?
CVE-2025-0220 affects the Ethernet Configuration Menu of the Trimble SPS851.
Can CVE-2025-0220 be exploited remotely?
Yes, CVE-2025-0220 can be exploited remotely, potentially compromising the device through cross-site scripting.