CVE-2023-7339

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-7339", "assignerOrgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "state": "PUBLISHED", "assignerShortName": "Softing", "dateReserved": "2026-03-27T10:08:58.402Z", "datePublished": "2026-03-27T10:53:07.778Z", "dateUpdated": "2026-03-27T12:21:25.031Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "shortName": "Softing", "dateUpdated": "2026-03-27T10:53:07.778Z"}, "title": "Data collection for dowloading leads into buffer overflow", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Softing", "product": "pnGate", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.30", "versionType": "custom"}, {"status": "unaffected", "version": "1.34", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "epGate", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.30", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "mbGate", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.30", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "smartLink HW-DP", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.30", "versionType": "custom"}, {"status": "unaffected", "version": "1.31", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "smartLink HW-PN", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.01", "versionType": "custom"}, {"status": "unaffected", "version": "1.02", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:pngate:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.30"}, {"vulnerable": false, "criteria": "cpe:2.3:a:softing:pngate:1.34:*:*:*:*:*:*:*"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:epgate:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.30"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:mbgate:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.30"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:smartlink_hw-dp:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.30"}, {"vulnerable": false, "criteria": "cpe:2.3:a:softing:smartlink_hw-dp:1.31:*:*:*:*:*:*:*"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:smartlink_hw-pn:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.01"}, {"vulnerable": false, "criteria": "cpe:2.3:a:softing:smartlink_hw-pn:1.02:*:*:*:*:*:*:*"}]}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.\nThis issue affects\npnGate: through 1.30\nepGate: through 1.30\nmbGate: through 1.30\nsmartLink HW-DP: through 1.30\nsmartLink HW-PN: through 1.01.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.<br>This issue affects<br>pnGate: through 1.30<br>epGate: through 1.30<br>mbGate: through 1.30<br>smartLink HW-DP: through 1.30<br>smartLink HW-PN: through 1.01.</p>"}]}], "references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html", "tags": ["x_html"]}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json", "tags": ["x_json"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "pnGate: fixed with 1.34", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>pnGate: fixed with 1.34<br></p>"}]}, {"lang": "en", "value": "smartLink HW-DP: fixed with 1.31\nsmartLink HW-PN: fixed with 1.02", "supportingMedia": [{"type": "text/html", "base64": false, "value": "smartLink HW-DP: fixed with 1.31<br>smartLink HW-PN: fixed with 1.02"}]}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html", "tags": ["broken-link"]}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json", "tags": ["broken-link"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-27T12:21:13.590182Z", "id": "CVE-2023-7339", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T12:21:25.031Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-7339", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-27T12:21:13.590182Z"}}}], "references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html", "tags": ["broken-link"]}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json", "tags": ["broken-link"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-27T12:21:08.049Z"}}], "cna": {"title": "Data collection for dowloading leads into buffer overflow", "source": {"discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Softing", "product": "pnGate", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.30"}, {"status": "unaffected", "version": "1.34", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "epGate", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.30"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "mbGate", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.30"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "smartLink HW-DP", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.30"}, {"status": "unaffected", "version": "1.31", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "smartLink HW-PN", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.01"}, {"status": "unaffected", "version": "1.02", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "pnGate: fixed with 1.34", "supportingMedia": [{"type": "text/html", "value": "<p>pnGate: fixed with 1.34<br></p>", "base64": false}]}, {"lang": "en", "value": "smartLink HW-DP: fixed with 1.31\nsmartLink HW-PN: fixed with 1.02", "supportingMedia": [{"type": "text/html", "value": "smartLink HW-DP: fixed with 1.31<br>smartLink HW-PN: fixed with 1.02", "base64": false}]}], "references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html", "tags": ["x_html"]}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json", "tags": ["x_json"]}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.\nThis issue affects\npnGate: through 1.30\nepGate: through 1.30\nmbGate: through 1.30\nsmartLink HW-DP: through 1.30\nsmartLink HW-PN: through 1.01.", "supportingMedia": [{"type": "text/html", "value": "<p>Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.<br>This issue affects<br>pnGate: through 1.30<br>epGate: through 1.30<br>mbGate: through 1.30<br>smartLink HW-DP: through 1.30<br>smartLink HW-PN: through 1.01.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:pngate:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.30", "versionStartIncluding": "0"}, {"criteria": "cpe:2.3:a:softing:pngate:1.34:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:epgate:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.30", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:mbgate:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.30", "versionStartIncluding": "0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:smartlink_hw-dp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.30", "versionStartIncluding": "0"}, {"criteria": "cpe:2.3:a:softing:smartlink_hw-dp:1.31:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:smartlink_hw-pn:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.01", "versionStartIncluding": "0"}, {"criteria": "cpe:2.3:a:softing:smartlink_hw-pn:1.02:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "shortName": "Softing", "dateUpdated": "2026-03-27T10:53:07.778Z"}}}, "cveMetadata": {"cveId": "CVE-2023-7339", "state": "PUBLISHED", "dateUpdated": "2026-03-27T12:21:25.031Z", "dateReserved": "2026-03-27T10:08:58.402Z", "assignerOrgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "datePublished": "2026-03-27T10:53:07.778Z", "assignerShortName": "Softing"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "pnGate", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.30", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.34", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "epGate", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.30", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "mbGate", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.30", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "smartLink HW-DP", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.30", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.31", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "smartLink HW-PN", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.01", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.02", "versionType": "custom"}]}], "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.\nThis issue affects\npnGate: through 1.30\nepGate: through 1.30\nmbGate: through 1.30\nsmartLink HW-DP: through 1.30\nsmartLink HW-PN: through 1.01."}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer basado en pila en las pasarelas de Softing Industrial Automation GmbH permite desbordar b\u00faferes.\nEste problema afecta a\npnGate: hasta 1.30\nepGate: hasta 1.30\nmbGate: hasta 1.30\nsmartLink HW-DP: hasta 1.30\nsmartLink HW-PN: hasta 1.01."}], "id": "CVE-2023-7339", "lastModified": "2026-10-28T19:10:00.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-7339", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-27T12:21:13.590182Z", "version": "2.0.3"}}]}, "published": "2026-03-27T11:16:01.863", "references": [{"source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html"}, {"source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.html"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2023/CVE-2023-7339.json"}], "sourceIdentifier": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "epgate", "vendor": "softing"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "mbgate", "vendor": "softing"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "1.34"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "pngate", "vendor": "softing"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.30]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "1.31"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "smartLink HW-DP", "source": "cna", "vendor": "Softing"}, "product": "smartlink_hw-dp", "vendor": "softing"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.01]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "1.02"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "smartLink HW-PN", "source": "cna", "vendor": "Softing"}, "product": "smartlink_hw-pn", "vendor": "softing"}], "analysis": {"en": {"generated_at": "2026-03-27T13:22:56.691616+00:00", "value": {"mitigation_remediation": ["Upgrade pnGate to version 1.34 or later.", "Upgrade smartLink HW\u2011DP to version 1.31 or later.", "Upgrade smartLink HW\u2011PN to version 1.02 or later.", "Monitor epGate and mbGate for an official patch; contact Softing for guidance when no update is available.", "Verify all firmware versions against the fixed release numbers and apply updates promptly.", "If patching cannot occur immediately, isolate the affected devices from external networks until a fix is available."], "summary": {"action": "Apply Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Affected products include Softing pnGate (vulnerable through 1.30), epGate (vulnerable through 1.30), mbGate (vulnerable through 1.30), smartLink HW\u2011DP (vulnerable through 1.30), and smartLink HW\u2011PN (vulnerable through 1.01). Official fixes exist for pnGate (1.34), smartLink HW\u2011DP (1.31), and smartLink HW\u2011PN (1.02). No fix for epGate or mbGate has been released; affected users should monitor vendor releases and contact Softing for guidance.", "description_and_impact": "This vulnerability is a stack\u2011based buffer overflow that allows an attacker to send crafted data to Softing Industrial Automation gateway devices and corrupt stack memory. The overflow can lead to arbitrary code execution or cause the device to crash. The impact on a supervisory control system is the potential compromise of device integrity and availability, which could threaten the safety and reliability of the processes it controls.", "risk_and_exploitability": "The CVSS score of 6.5 denotes moderate severity. No EPSS score is available, so the precise likelihood of exploitation cannot be quantified, but the presence of a buffer overflow and the lack of a patch for several devices raises concerns. The vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported. Based on the description, the likely attack vector is remote network or command\u2011protocol interaction, where an attacker sends maliciously constructed data packets that trigger the stack overflow."}}}}, "created": "2026-03-27T15:47:07.093409+00:00", "title": "Stack-Based Buffer Overflow in Softing Gateways Enables Remote Code Execution", "updated": "2026-03-30T07:59:45.257128+00:00", "vendors": ["softing", "softing$PRODUCT$epgate", "softing$PRODUCT$mbgate", "softing$PRODUCT$pngate", "softing$PRODUCT$smartlink_hw-dp", "softing$PRODUCT$smartlink_hw-pn"]}