Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.5
CVE-2025-46358: Emerson ValveLink products lack critical security protection
CVE-2025-46358 · published 1 year ago
Summary
Emerson ValveLink products are missing a key security feature that prevents hackers from targeting them. This makes it easier for attackers to access and control the products, potentially leading to unauthorized changes to the operation of industrial equipment. To mitigate this risk, install any available security patches as soon as possible.
Original advisory text
Emerson ValveLink products
do not use or incorrectly uses a protection mechanism that provides
sufficient defense against directed attacks against the product.
Emerson ValveLink products
do not use or incorrectly uses a protection mechanism that provides
sufficient defense against directed attacks against the product.
do not use or incorrectly uses a protection mechanism that provides
sufficient defense against directed attacks against the product.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-693Protection Mechanism Failure
Timeline
Published11 Jul 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-46358 · NVD
Track software like this
Free during beta