Skip to content
OpenAdvisories
Medium · 5.1 CVE-2025-48496 EUVD-2025-21093GHSA-jw79-crqj-2vfw

Emerson ValveLink Products Uncontrolled Search Path Element

Published Jul 10, 2025 · Updated Jul 11, 2025 · Assigned by icscert

Description

Emerson ValveLink products
use a fixed or controlled search path to find resources, but one or
more locations in that path can be under the control of unintended
actors.

Affected products

VendorProductAffectedFixed
Emerson ValveLink SOLO < ValveLink 14.0 ValveLink 14.0
Emerson ValveLink DTM < ValveLink 14.0 ValveLink 14.0
Emerson ValveLink PRM < ValveLink 14.0 ValveLink 14.0
Emerson ValveLink SNAP-ON < ValveLink 14.0 ValveLink 14.0

Advisories 1

References