BaseFortify

Publication date: 2025-10-28

Last updated on: 2025-10-30

Assigner: Softing

Description

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-28

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-28

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10150

EUVD

EUVD-2025-36438

Affected Vendors & Products

Vendor	Product	Version / Range
softing	smartlink_hw-dp	1.31
softing	smartlink_hw-pn	1.02
softing	smartlink_hw-pn	1.03

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-833	The product contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

Attack-Flow Graph

Executive Summary

This vulnerability is a webserver crash in Softing Industrial Automation GmbH gateways and switches caused by scanning on TCP port 80. It affects specific versions of smartLink HW-PN (from 1.02 through 1.03) and smartLink HW-DP (version 1.31).

Impact Analysis

The vulnerability can cause the webserver on affected devices to crash when scanned on TCP port 80, potentially leading to denial of service or disruption of network operations relying on these gateways and switches.

Hi! I’m here to help you understand CVE-2025-10150. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70