Back to Database
Status published
Medium
CVE-2025-48496
Emerson ValveLink Products Uncontrolled Search Path Element
Vulnerability Description
Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48496
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Emerson reported these vulnerabilities to CISA.
References
More from Emerson
View All →CVE-2025-53471
Emerson ValveLink Products Improper Input Validation
Medium
5.9
CVE-2025-52579
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
Critical
9.3
CVE-2025-50109
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
High
8.5
CVE-2025-46358
Emerson ValveLink Products Protection Mechanism Failure
High
8.5
CVE-2023-51761
Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication
High
8.3
Affected Vendor
Emerson
View all reports →Affected Software
ValveLink SOLO, ValveLink DTM, ValveLink PRM, ValveLink SNAP-ON
Vulnerable Versions:
0
Timeline
Official Publish:
July 10th, 2025
Last Modified:
July 11th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H