Description
Emerson ValveLink Products store sensitive information in cleartext in memory. The
sensitive memory might be saved to disk, stored in a core dump, or
remain uncleared if the product crashes, or if the programmer does not
properly clear the memory before freeing it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Emerson | ValveLink SOLO | < ValveLink 14.0 | ValveLink 14.0 |
| Emerson | ValveLink DTM | < ValveLink 14.0 | ValveLink 14.0 |
| Emerson | ValveLink PRM | < ValveLink 14.0 | ValveLink 14.0 |
| Emerson | ValveLink SNAP-ON | < ValveLink 14.0 | ValveLink 14.0 |
Advisories 1
- ICSA-25-189-01 Emerson ValveLink Products CISA ICS & IT advisories · Jul 8, 2025