unnamed

organization

01

roles

Roles this identity holds.

02

references

Other names and identifiers for this entity.

nvdUS 10de8ef9-5c89-4b17-8228-e97b74acf4bd

03

assessed vulnerabilities (9)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-13148US	—	0.40% (34th)	—	2026-09-04
Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10.
CVE-2023-7339US	—	0.36% (30th)	—	2026-03-27
Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGat…
CVE-2024-14028US	—	0.21% (12th)	—	2026-03-27
Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02…
CVE-2025-13406US	—	0.33% (26th)	—	2026-03-17
NULL Pointer Dereference vulnerability in Softing Industrial Automation GmbH smartLink SW-HT (Webserver modules) allows HTTP DoS.This issue affects smartLink SW-HT: 1.43.
CVE-2025-10685US	—	0.51% (43rd)	—	2026-03-16
Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects:…
CVE-2025-10461US	—	0.38% (32nd)	—	2026-03-16
Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affec…
CVE-2025-10151US	—	0.23% (14th)	—	2025-10-28
Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 th…
CVE-2025-10150US	—	0.26% (18th)	—	2025-10-28
Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink H…
CVE-2025-7390US	—	0.26% (17th)	—	2025-08-21
A malicious client can bypass the client certificate trust check of an opc.https server when the server endpoint is configured to allow only secure communication.