CVE-2025-48496
BaseFortify
Publication date: 2025-07-11
Last updated on: 2025-07-15
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| emerson | valvelink | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Emerson ValveLink products involves the use of a fixed or controlled search path to find resources, where one or more locations in that path can be controlled by unintended actors. This means that an attacker could potentially influence which resources the software loads or accesses by manipulating the search path.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing unintended actors to influence the resources that Emerson ValveLink products load or access, which could lead to unauthorized actions or disruptions. According to the CVSS scores, the impact is moderate with a base score of 5.9 (v4.0) and 5.1 (v3.1), indicating a potential for high availability impact but no direct confidentiality or integrity impact.