Valmet DNA Engineering Web Tools

Risk Summary

Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.

CVEs (1)

Remediations

• Valmet has issued a fix for the reported vulnerability. Valmet recommends users reach out directly to their automation customer service group to obtain assistance with the fix: https://www.valmet.com/contact/.
• For additional information, refer to Valmet's security advisory regarding this issue: https://www.valmet.com/company/innovation/advisories/CVE-2025-15577/.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Energy