CVE-2025-53471

Emerson ValveLink Products Improper Input Validation

CVSS 5.9 MEDIUMEPSS 0.2%CWE-20

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected products

Emerson · ValveLink DTM Emerson · ValveLink PRM Emerson · ValveLink SNAP-ON Emerson · ValveLink SOLO

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-189-01.json https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 https://www.emerson.com/en-us/support/security-notifications https://www.emerson.com/en-us/support/software-downloads-drivers