Softing — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by Softing (softing). https://vulnogram.org/seaview/icons/softing.png Softing — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2026-13148 · 6.3 MEDIUM — Memory leak in scan method https://vulnogram.org/CVE-2026-13148 https://vulnogram.org/CVE-2026-13148 Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10. Medium Fri, 04 Sep 2026 09:44:58 GMT CVE-2023-7339 · 6.5 MEDIUM — Data collection for dowloading leads into buffer overflow https://vulnogram.org/CVE-2023-7339 https://vulnogram.org/CVE-2023-7339 Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGate: through 1.30 smartLink HW-DP: through 1.30 smartLink HW-PN: through… Medium Fri, 27 Mar 2026 10:53:07 GMT CVE-2024-14028 · 6.5 MEDIUM 🌩️ — Multiple implicit reads in parallel can result in a crash or denial of service https://vulnogram.org/CVE-2024-14028 https://vulnogram.org/CVE-2024-14028 Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02. Medium Network Exploitable Fri, 27 Mar 2026 05:53:40 GMT CVE-2025-13406 · 6.8 MEDIUM — Scanning for higher HART revision device leads into NULL pointer dereference in live list https://vulnogram.org/CVE-2025-13406 https://vulnogram.org/CVE-2025-13406 NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43. Medium Tue, 17 Mar 2026 14:32:21 GMT CVE-2025-10461 · 5.3 MEDIUM — Global file reads caused by improper URL checks in webserver https://vulnogram.org/CVE-2025-10461 https://vulnogram.org/CVE-2025-10461 Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03. Medium Mon, 16 Mar 2026 13:27:21 GMT CVE-2025-10685 · 7.7 HIGH 🌩️ — HTTP POST with specific higher content length leads into heap corruption https://vulnogram.org/CVE-2025-10685 https://vulnogram.org/CVE-2025-10685 Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink SW-HT: through 1.42 High Network Exploitable Mon, 16 Mar 2026 13:14:49 GMT CVE-2025-10151 · 7.2 HIGH — Malicious TCP/IP thread locking leads into diverse malfunctions https://vulnogram.org/CVE-2025-10151 https://vulnogram.org/CVE-2025-10151 Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31 High Tue, 28 Oct 2025 07:25:39 GMT CVE-2025-10150 · 8.7 HIGH 🌩️ — Webserver crash caused by scanning on TCP port 80 https://vulnogram.org/CVE-2025-10150 https://vulnogram.org/CVE-2025-10150 Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31 High Network Exploitable Tue, 28 Oct 2025 07:24:38 GMT CVE-2025-7390 · 9.1 CRITICAL 🌩️ — Bypass the client certificate trust check of an opc.https server while only secure communication is allowed https://vulnogram.org/CVE-2025-7390 https://vulnogram.org/CVE-2025-7390 A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication. Critical Network Exploitable Thu, 21 Aug 2025 06:08:00 GMT