Webserver Crash in Softing Industrial Automation GmbH Gateways and Switches
CVE-2025-10150

8.7HIGH

Key Information:

Vendor

Softing Industrial Automation Gmbh

Status
Smartlink Hw-pn
Smartlink Hw-dp
Vendor
CVE Published:
28 October 2025

What is CVE-2025-10150?

A vulnerability exists in the Softing Industrial Automation GmbH gateways and switches, which leads to a webserver crash when scanning occurs on TCP port 80. This issue impacts specific versions of smartLink hardware, potentially disrupting service and operations for users relying on these devices.

Affected Version(s)

smartLink HW-DP 0 <= 1.31

smartLink HW-PN 1.02 <= 1.03

References

https://industrial.softing.com/fileadmin/psirt/downloads/...
x_html
https://industrial.softing.com/fileadmin/psirt/downloads/...
x_json

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.