Smartlink Hw Pn
Monthly
Uncontrolled memory growth in Softing smartLink HW-PN versions 1.04 through 1.09 allows a low-privileged network-adjacent attacker to trigger a resource leak that propagates high-integrity and low-availability impact to downstream subsequent systems - likely PROFINET-connected industrial devices bridged through the gateway. The vulnerability is classified CWE-401 (Missing Release of Memory after Effective Lifetime), indicating that allocated memory is not freed upon session or object expiration, accumulating over time. No public exploit code has been identified at time of analysis, though the CVSS 4.0 supplemental field marks it automatable (AU:Y), suggesting the trigger condition can be scripted without manual interaction.
Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Uncontrolled memory growth in Softing smartLink HW-PN versions 1.04 through 1.09 allows a low-privileged network-adjacent attacker to trigger a resource leak that propagates high-integrity and low-availability impact to downstream subsequent systems - likely PROFINET-connected industrial devices bridged through the gateway. The vulnerability is classified CWE-401 (Missing Release of Memory after Effective Lifetime), indicating that allocated memory is not freed upon session or object expiration, accumulating over time. No public exploit code has been identified at time of analysis, though the CVSS 4.0 supplemental field marks it automatable (AU:Y), suggesting the trigger condition can be scripted without manual interaction.
Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.