PT-2025-28650 · Emerson · Valvelink Products

Published 2025-07-08 · Updated 2025-07-31 · CVE-2025-52579

Positive Technologies (AI Summary)

CVSS v2.0

9.7

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink Products (affected versions not specified)

Description: Emerson ValveLink Products store sensitive information in cleartext in memory. This sensitive memory may be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it. This could lead to privilege escalation through parameter tampering.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-316

Related Identifiers

BDU:2025-14624

CVE-2025-52579

Affected Products

Valvelink Products

References · 8

• https://bdu.fstec.ru/vul/2025-14624 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-52579 · Security Note
• https://t.me/aptreports/20910 · Telegram Post
• https://twitter.com/CVEnew/status/1943668159627903291 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-189-01 · Note
• https://twitter.com/0dayPublishing/status/1942621959302365458 · Twitter Post
• https://emerson.com/en-us/support/security-notifications · Note
• https://emerson.com/en-us/support/software-downloads-drivers · Note