CVE-2025-53471

Emerson ValveLink Products Improper Input Validation

CVSS 5.9 MEDIUMEPSS 0.2%CWE-20

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Productos afectados

Emerson · ValveLink DTM Emerson · ValveLink PRM Emerson · ValveLink SNAP-ON Emerson · ValveLink SOLO

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-189-01.json https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 https://www.emerson.com/en-us/support/security-notifications https://www.emerson.com/en-us/support/software-downloads-drivers