CVE-2025-10150 HIGH

CVE-2025-10150: Webserver crash caused by scanning on TCP port 80

Vendor Softing Industrial Automation Gmbh
Product smartLink HW-PN
Weakness CWE-833
Published October 28, 2025
Last update October 28, 2025

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:U/RE:M/U:Amber

What the vulnerability does

01Description

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31

Key dates

02Disclosure timeline

October 28, 2025 CVE published
October 28, 2025 Record updated