Vulnerability Description
Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
CVSS Score
5.1
MEDIUM
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Related Weaknesses (CWE)
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-189-01
- https://www.emerson.com/en-us/support/security-notifications
- https://www.emerson.com/en-us/support/software-downloads-drivers
FAQ
What is CVE-2025-48496?
CVE-2025-48496 is a vulnerability with a CVSS score of 5.1 (MEDIUM). Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
How severe is CVE-2025-48496?
CVE-2025-48496 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-48496?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.