CVE-2025-53471

Emerson ValveLink Products Improper Input Validation

CVSS 5.9 MEDIUMEPSS 0.2%CWE-20

Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Produtos afetados

Emerson · ValveLink DTM Emerson · ValveLink PRM Emerson · ValveLink SNAP-ON Emerson · ValveLink SOLO

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-189-01.json https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 https://www.emerson.com/en-us/support/security-notifications https://www.emerson.com/en-us/support/software-downloads-drivers