SB2025071031 - Multiple vulnerabilities in Emerson ValveLink Products
Published: July 10, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Cleartext storage of sensitive information (CVE-ID: CVE-2025-52579)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to cleartext storage of sensitive information. A remote attacker can gain access to sensitive information.
2) Cleartext storage of sensitive information (CVE-ID: CVE-2025-50109)
The vulnerability allows a local attacker to gain access to potentially sensitive information.
The vulnerability exists due to cleartext storage of sensitive information. A local attacker can gain access to sensitive information.
3) Protection Mechanism Failure (CVE-ID: CVE-2025-46358)
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient implementation of security measures. A remote attacker can bypass implemented security restrictions and elevate privileges on the system.
4) Unquoted Search Path or Element (CVE-ID: CVE-2025-48496)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to uncontrolled search path element. A remote attacker can cause a denial of service condition on the target system.
5) Input validation error (CVE-ID: CVE-2025-53471)
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and modify data or system behavior.
Remediation
Install update from vendor's website.