CVE-2025-48496CWE-427

Emerson ValveLink Products Uncontrolled Search Path Element

Medium · published July 10, 2025

CVSS v4.0
5.9
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Emerson ValveLink products

use a fixed or controlled search path to find resources, but one or

more locations in that path can be under the control of unintended

actors.

The record
Technical detail
CVSS v4.0
5.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2025-07-10T23:43Z
EPSS history
Timeline
  • 10 JUL 23:43Z
    Emerson ValveLink Products Uncontrolled Search Path Element
    cvelistv5