Skip to content
OpenAdvisories
Critical ICSA-25-189-01 5 CVEs

Emerson ValveLink Products

Published Jul 8, 2025 · Updated Jul 8, 2025

Vendor: Emerson Product: ValveLink DTM Product: ValveLink PRM Product: ValveLink SNAP-ON Product: ValveLink SOLO

Summary

Successful exploitation of these vulnerabilities could allow an attacker with access to the system to read sensitive information stored in cleartext, tamper with parameters, and run un-authorized code.

Vulnerabilities 5

  • Critical 9.4
    CVE-2025-52579

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freei…

    Emerson ValveLink DTM ValveLink SNAP-ON ValveLink SOLO
  • High 7.7
    CVE-2025-46358

    Emerson ValveLink Products Protection Mechanism Failure

    Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

    Emerson ValveLink DTM ValveLink SNAP-ON ValveLink SOLO
  • High 7.7
    CVE-2025-50109

    Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

    Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.

    Emerson ValveLink PRM ValveLink DTM ValveLink SNAP-ON
  • Medium 5.1
    CVE-2025-48496

    Emerson ValveLink Products Uncontrolled Search Path Element

    Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

    Emerson ValveLink SNAP-ON ValveLink SOLO ValveLink PRM
  • Medium 5.1
    CVE-2025-53471

    Emerson ValveLink Products Improper Input Validation

    Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

    Emerson ValveLink SOLO ValveLink PRM ValveLink DTM

Revision history

  1. #1

    Initial Publication

References