What’s Vulnerable › Vulnerabilities

CVE-2025-10150: Webserver crash caused by scanning on TCP port 80

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-28 · updated 2026-10-18
• Weakness: CWE-833

Description

Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31

Affected products

• Softing Industrial Automation GmbH smartLink HW-DP: through 1.31
• Softing Industrial Automation GmbH smartLink HW-PN: from 1.02 through 1.03

References

• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10150.html
• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10150.json

Get alerted when CVE-2025-10150 or the next vulnerability affects your stack