← Back to home
ICSA-25-189-01  ·  Published 2025-07-08  ·  View on CISA ICS-CERT ↗

Emerson ValveLink Products

CVSS 9.4 CRITICAL

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker with access to the system to read sensitive information stored in cleartext, tamper with parameters, and run un-authorized code.

Remediations

  • Emerson recommends users update their Valvelink software to ValveLink 14.0 or later. The upgrade can be downloaded from the Emerson website.
  • For more information see the associated Emerson security notification.

Affected Vendors

Emerson

Affected Products (4)

Emerson · ValveLink SOLO <ValveLink_14.0
Emerson · ValveLink DTM <ValveLink_14.0
Emerson · ValveLink PRM <ValveLink_14.0
Emerson · ValveLink SNAP-ON <ValveLink_14.0

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more