CVE-2025-48496

MEDIUM

Emerson ValveLink SOLO < 14.0 - Uncontrolled Search Path Element

Title source: llm

Description

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (3)

Core 3

Core References

Various Sources

https://www.emerson.com/en-us/support/security-notifications

Various Sources

https://www.emerson.com/en-us/support/software-downloads-drivers

Third Party Advisory, US Government Resource

https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01

Scores

CVSS v3 5.1

EPSS 0.0017

EPSS Percentile 6.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-427

Status published

Products (4)

Emerson/ValveLink DTM < ValveLink 14.0

Emerson/ValveLink PRM < ValveLink 14.0

Emerson/ValveLink SNAP-ON < ValveLink 14.0

Emerson/ValveLink SOLO < ValveLink 14.0

Published Jul 11, 2025

Tracked Since Feb 18, 2026