CVE-2025-10151highCWE-667

CVE-2025-10151: high-severity vulnerability in Softing Industrial Automation GmbH smartLink…

Malicious TCP/IP thread locking leads into diverse malfunctions

Published

Follow this CVE+ Monitor smartLink HW-DP+ Monitor smartLink HW-PN

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.2%
Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/AU:Y/R:U/RE:M/U:Amber
Affected products
Softing Industrial Automation GmbH · smartLink HW-DPSofting Industrial Automation GmbH · smartLink HW-PN
Related CVEs — Softing Industrial Automation GmbH smartLink…

In the same product, most dangerous first.

CVE-2025-10150HIGHWebserver crash caused by scanning on TCP port 80EPSS 0.3%