CVE-2020-6971

Name of the Vulnerable Software and Affected Versions Emerson ValveLink versions 12.0.264 through 13.4.118

Description A vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters.

Recommendations For Emerson ValveLink versions 12.0.264 through 13.4.118, consider reconfiguring the software to secure configuration parameters until a patch is available. As a temporary workaround, restrict access to the ValveLink software to minimize the risk of exploitation.