Medium severity · published Jul 10, 2025
CVE-2025-53471
Emerson ValveLink Products Improper Input Validation
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
Emerson ValveLink products
receive input or data, but does not validate or incorrectly
validates that the input has the properties that are required to process
the data safely and correctly.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VD
ValveLink DTM · Emerson
before ValveLink 14.0 · source: vendor
VP
ValveLink PRM · Emerson
before ValveLink 14.0 · source: vendor
VS
ValveLink SNAP-ON · Emerson
before ValveLink 14.0 · source: vendor
VS
ValveLink SOLO · Emerson
before ValveLink 14.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-53471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-53471
github.com
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-189-01.json
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01
www.emerson.com
https://www.emerson.com/en-us/support/security-notifications
www.emerson.com
https://www.emerson.com/en-us/support/software-downloads-drivers
More from ValveLink DTM
9.4
CVE-2025-52579
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
7.7
CVE-2025-46358
Emerson ValveLink Products Protection Mechanism Failure
7.7
CVE-2025-50109
Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory
5.1
CVE-2025-48496
Emerson ValveLink Products Uncontrolled Search Path Element