CVE-2025-53471
Last modified
CVE-2025-53471 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Emerson ValveLink products receive input or data, but does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Metrics
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-53471?
How severe is CVE-2025-53471?
How do I fix CVE-2025-53471?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-53466Improper Neutralization of Input During Web Page Generation …5.9
- CVE-2025-53467Improper Neutralization of Input During Web Page Generation …5.9
- CVE-2025-53468Improper Neutralization of Special Elements used in an SQL C…8.5
- CVE-2025-53469Improper Neutralization of Input During Web Page Generation …5.9
- CVE-2025-5347Zohocorp ManageEngine Exchange Reporter Plus versions before…5.4
- CVE-2025-53470Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 dr…3.1
- CVE-2025-53472WRC-BE36QS-B and WRC-W701-B contain an improper neutralizati…8.6
- CVE-2025-53473Server-side request forgery (SSRF) vulnerability exists n mu…7.3
- CVE-2025-53474When an iRule using an ILX::call command is configured on a …8.7
- CVE-2025-53475A vulnerability exists in Advantech iView that could allow f…8.8
- CVE-2025-53476A denial of service vulnerability exists in the ModbusTCP se…5.3
- CVE-2025-53477NULL Pointer Dereference vulnerability in Apache Nimble. Mi…7.5
Are you affected by CVE-2025-53471?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST