Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-52579

Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Emerson ValveLink SOLO

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink DTM

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink PRM

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

Emerson ValveLink SNAP-ON

Default version status: unaffected

  • 0 to < ValveLink 14.0affected

References