Emerson Valvelink Snap-On vulnerabilities

5 CVEs affecting Emerson Valvelink Snap-On, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-53471, published 2025-07-11.

More from Emerson.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-52579, published 2025-07-11. Critical severity, CVSS 9.4. EPSS: 0.4% chance of exploitation in the next 30 days. Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if…
• CVE-2025-46358, published 2025-07-11. High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days. Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
• CVE-2025-48496, published 2025-07-11. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
• CVE-2025-53471, published 2025-07-11. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
• CVE-2025-50109, published 2025-07-11. High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days. Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.