CVE-2025-10150

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31

Scoring

Severity

HIGH

CVSS base score

8.7

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:U/RE:M/U:Amber

EPSS probability

0.24%

CWE

CWE-833

Published

2025-10-28

Last modified

2026-03-12

Affected products

• Softing Industrial Automation GmbH smartLink HW-PN
• Softing Industrial Automation GmbH smartLink HW-DP

Weakness type

• CWE-833

Related vulnerabilities

• CVE-2026-70616 — boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint
• CVE-2026-10647 — Deadlock denial of service in USB CDC-NCM device class on TX enqueue failure
• CVE-2026-47334 — Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
• CVE-2026-33904 — Ella Core has a Denial of Service via SCTP connection cleanup deadlock
• CVE-2025-59463 — Denial-of-service (DoS) via chunk size mismatch
• CVE-2025-54796 — Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
• CVE-2025-8312 — Deadlock in PAM automatic check-in feature in Devolutions Server allows a password to remain valid...
• CVE-2025-36010 — IBM Db2 for Linux denial of service

Markdown version · Browse all CVEs