CVE-2025-52579
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or i...
Affects 0 products across 2 vendors.
Emerson ValveLink products are vulnerable to storing sensitive information in cleartext in memory, which can be exposed if the memory is saved to disk, stored in a core dump, or remains uncleared after a crash. This vulnerability poses a significant risk to the confidentiality and integrity of the system.
BSID: BS-2025-GLOBAL-262357-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-52579?
What is the CVSS score for CVE-2025-52579?
Is CVE-2025-52579 actively exploited?
How do I remediate CVE-2025-52579?
What systems are affected by CVE-2025-52579?
What NERC-CIP standard applies to CVE-2025-52579?
What IEC 62443 requirement maps to CVE-2025-52579?
| CVE ID | CVE-2025-52579 |
|---|---|
| BSID | BS-2025-GLOBAL-262357-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L |
| Published | 2025-07-11 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 55% |
| Weakness (CWE) | |
| Verticals | |
| Source | NVD |
Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it.
Source: NIST NVD / MITRE CVE Database
The vulnerability allows an attacker to access sensitive information such as credentials or configuration data stored in cleartext in memory. This can occur if the memory is saved to disk, stored in a core dump, or remains uncleared after a crash. The attacker does not need physical access to the device, as the information can be accessed remotely if the memory is exposed through network services or other means.
Exploitation Likelihood: MEDIUM
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict memory management practices to ensure that sensitive information is properly cleared from memory before it is freed. Use encryption for sensitive data in memory where possible.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R2 because it involves the storage of sensitive information in cleartext, which can be accessed by unauthorized individuals, compromising the security of the system.
This CVE maps to SR 7.6 because it involves the protection of sensitive information in memory, which is crucial for maintaining the confidentiality and integrity of the system.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 1986fce2ebba12f5b273dd64bbef696b4d836bf58555936668601dd24745a0d52fd4803ebee0e6dd8296734b1a65240e2a64473999d00d0574e649fd899d9ecc |
Critical Severity - Know Your Exposure
A CVSS 9.4 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →