CVE-2020-6971

In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters.

Score

CVSS 3.1 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2020-03-05

Last modified

2024-08-04

Weaknesses

CWE-269, CWE-284

Affected products

• Valvelink (Emerson)

References

• https://www.us-cert.gov/ics/advisories/icsa-20-063-01