CNNVD-202507-1598 Information

CNNVD ID

CNNVD-202507-1598

CVE-2025-48496

  • CNNVD Published: 2025-07-11

Description (Chinese)

Emerson ValveLink是美国艾默生电气(Emerson)公司的一套数字阀门配置和诊断软件。 Emerson ValveLink存在代码问题漏洞,该漏洞源于资源搜索路径控制不当,可能导致非预期行为。

Description (English)

Emerson ValveLink is a digital valve configuration and diagnostic software for Emerson Electric, USA. Emerson ValveLink had a code gap, which stemmed from inadequate resource search path controls, which could lead to unintended behaviour.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

艾默生电气

Published

2025-07-11

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01 https://www.emerson.com/en-us/support/security-notifications https://www.emerson.com/en-us/support/software-downloads-drivers https://access.redhat.com/security/cve/cve-2025-48496

Patch

https://mysoftware.emerson.com/application-softwares?search_term=ValveLink

Share on: