description: In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow a local, unprivileged, trusted insider to escalate privileges due to insecure configuration parameters.
problem types: IMPROPER ACCESS CONTROL CWE-284
affected:
{
product: Emerson ValveLink
vendor: n/a
versions:
status: affected, version: v12.0.264 to v13.4.118
}