CVE-2025-46358

Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Score

CVSS 4.0 8.5 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-07-11

Last modified

2025-07-11

Weaknesses

CWE-693

Affected products

• Valvelink Dtm (Emerson)
• Valvelink Prm (Emerson)
• Valvelink Snap-on (Emerson)
• Valvelink Solo (Emerson)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01
• https://www.emerson.com/en-us/support/security-notifications
• https://www.emerson.com/en-us/support/software-downloads-drivers