Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-48496

Emerson ValveLink Products Uncontrolled Search Path Element

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Emerson ValveLink SOLO

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink DTM

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink PRM

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink SNAP-ON

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

References