CVEvulnerability
CVE-2025-53471
5.9 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 5.9 MEDIUM — CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 5.1 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-20
Description
Emerson ValveLink products
receive input or data, but does not validate or incorrectly
validates that the input has the properties that are required to process
the data safely and correctly.
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-189-01.json github.com
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 www.cisa.gov
- https://www.emerson.com/en-us/support/security-notifications www.emerson.com
- https://www.emerson.com/en-us/support/software-downloads-drivers www.emerson.com