Emerson ValveLink Products Uncontrolled Search Path Vulnerability

A vulnerability exists in Emerson ValveLink products due to an uncontrolled search path element, allowing unintended actors to potentially manipulate resource locations. This issue affects ValveLink SOLO, DTM, PRM, and SNAP-ON, all versions prior to 14.0.

Impact

Exploitation of this vulnerability could enable an attacker to execute unauthorized code on the affected system.

Remediation

Users are advised to update to ValveLink 14.0 or later. The update is available on the Emerson website. For more information, see the associated Emerson security notification.