Approved changes feed: RSS · Atom

cpe:2.3:a:softing:smartlink_sw-ht:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSofting (4b32be6d-69ed-5932-83e7-5560b6afc48d)
ProductSmartlink Sw Ht (5178a4aa-285e-5806-9b75-4a3217e0f7db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13406 vulnerable 2026-06-08 07:04:32.142303 Scanning for higher HART revision device leads into NULL pointer dereference in live list
NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43.
Published: 2026-03-17T14:32:21.500Z
Updated: 2026-03-27T08:09:49.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10685 vulnerable 2026-06-08 07:02:27.314510 HTTP POST with specific higher content length leads into heap corruption
Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects: smartLink SW-PN: through 1.03 smartLink SW-HT: through 1.42
Published: 2026-03-16T13:14:49.030Z
Updated: 2026-03-27T08:12:30.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10461 vulnerable 2026-06-08 07:02:26.910404 Global file reads caused by improper URL checks in webserver
Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.
Published: 2026-03-16T13:27:21.381Z
Updated: 2026-03-27T08:13:41.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48193 vulnerable 2026-06-08 05:50:41.592077 Weak ciphers vulnerability in Softing smartLink SW-HT
MEDIUM (5.9)
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).
Published: 2023-11-06T00:00:00.000Z
Updated: 2024-10-28T18:37:39.311Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-48192 vulnerable 2026-06-08 05:50:41.591601 Cross-site scripting vulnerability in Softing smartLink SW-HT
HIGH (7.2)
Cross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application.
Published: 2023-11-06T00:00:00.000Z
Updated: 2024-09-05T14:18:12.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.