CVE-2025-10685

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10685", "assignerOrgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "state": "PUBLISHED", "assignerShortName": "Softing", "dateReserved": "2025-09-18T12:45:55.230Z", "datePublished": "2026-03-16T13:14:49.030Z", "dateUpdated": "2026-03-27T08:12:30.109Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "shortName": "Softing", "dateUpdated": "2026-03-27T08:12:30.109Z"}, "title": "HTTP POST with specific higher content length leads into heap corruption", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "Softing", "product": "smartLink SW-PN", "modules": ["Webserver"], "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.03", "versionType": "custom"}, {"status": "unaffected", "version": "1.04", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "product": "smartLink SW-HT", "modules": ["Webserver"], "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "1.42", "versionType": "custom"}, {"status": "unaffected", "version": "1.43", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:smartlink_sw-pn:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.03"}, {"vulnerable": false, "criteria": "cpe:2.3:a:softing:smartlink_sw-pn:1.04:*:*:*:*:*:*:*"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:softing:smartlink_sw-ht:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndIncluding": "1.42"}, {"vulnerable": false, "criteria": "cpe:2.3:a:softing:smartlink_sw-ht:1.43:*:*:*:*:*:*:*"}]}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects:\n\nsmartLink SW-PN: through 1.03\n\nsmartLink SW-HT: through 1.42", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.<p>This issue affects:</p><p>smartLink SW-PN: through 1.03</p><p>smartLink SW-HT: through 1.42</p>"}]}], "references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.html"}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.json"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "YES", "Recovery": "AUTOMATIC", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "RED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/AU:Y/R:A/RE:L/U:Red"}}], "solutions": [{"lang": "en", "value": "Update firmware for\n\nsmartLink SW-PN: to 1.04\n\nsmartLink SW-HT: to 1.43", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Update firmware for</p><p>smartLink SW-PN: to 1.04</p><p>smartLink SW-HT: to 1.43</p>\n\n<br>"}]}], "credits": [{"lang": "en", "value": "Frank Renner", "type": "finder"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-16T14:41:54.340261Z", "id": "CVE-2025-10685", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-16T14:41:59.763Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10685", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-16T14:41:54.340261Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-16T14:41:56.569Z"}}], "cna": {"title": "HTTP POST with specific higher content length leads into heap corruption", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Frank Renner"}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "AUTOMATIC", "baseScore": 7.7, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/AU:Y/R:A/RE:L/U:Red", "exploitMaturity": "UNREPORTED", "providerUrgency": "RED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Softing", "modules": ["Webserver"], "product": "smartLink SW-PN", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.03"}, {"status": "unaffected", "version": "1.04", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Softing", "modules": ["Webserver"], "product": "smartLink SW-HT", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.42"}, {"status": "unaffected", "version": "1.43", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update firmware for\n\nsmartLink SW-PN: to 1.04\n\nsmartLink SW-HT: to 1.43", "supportingMedia": [{"type": "text/html", "value": "<p>Update firmware for</p><p>smartLink SW-PN: to 1.04</p><p>smartLink SW-HT: to 1.43</p>\n\n<br>", "base64": false}]}], "references": [{"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.html"}, {"url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.json"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects:\n\nsmartLink SW-PN: through 1.03\n\nsmartLink SW-HT: through 1.42", "supportingMedia": [{"type": "text/html", "value": "Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.<p>This issue affects:</p><p>smartLink SW-PN: through 1.03</p><p>smartLink SW-HT: through 1.42</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:smartlink_sw-pn:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.03", "versionStartIncluding": "0"}, {"criteria": "cpe:2.3:a:softing:smartlink_sw-pn:1.04:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:softing:smartlink_sw-ht:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.42", "versionStartIncluding": "0"}, {"criteria": "cpe:2.3:a:softing:smartlink_sw-ht:1.43:*:*:*:*:*:*:*", "vulnerable": false}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "shortName": "Softing", "dateUpdated": "2026-03-27T08:12:30.109Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10685", "state": "PUBLISHED", "dateUpdated": "2026-03-27T08:12:30.109Z", "dateReserved": "2025-09-18T12:45:55.230Z", "assignerOrgId": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "datePublished": "2026-03-16T13:14:49.030Z", "assignerShortName": "Softing"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["Webserver"], "product": "smartLink SW-PN", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.03", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.04", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "modules": ["Webserver"], "product": "smartLink SW-HT", "vendor": "Softing", "versions": [{"lessThanOrEqual": "1.42", "status": "affected", "version": "0", "versionType": "custom"}, {"status": "unaffected", "version": "1.43", "versionType": "custom"}]}], "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects:\n\nsmartLink SW-PN: through 1.03\n\nsmartLink SW-HT: through 1.42"}, {"lang": "es", "value": "Vulnerabilidad de desbordamiento de b\u00fafer basado en mont\u00edculo en Softing Industrial Automation GmbH smartLink SW-PN y smartLink SW-HT (m\u00f3dulos de servidor web) permite el desbordamiento de b\u00faferes. Este problema afecta a:\n\nsmartLink SW-PN: hasta 1.03\n\nsmartLink SW-HT: hasta 1.42"}], "id": "CVE-2025-10685", "lastModified": "2026-06-17T08:28:46.020", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "AUTOMATIC", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "RED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:L/U:Red", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10685", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-16T14:41:54.340261Z", "version": "2.0.3"}}]}, "published": "2026-03-16T14:17:53.890", "references": [{"source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.html"}, {"source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "url": "https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10685.json"}], "sourceIdentifier": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-122"}], "source": "10de8ef9-5c89-4b17-8228-e97b74acf4bd", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.42]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[1.43,1.43]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "inferred", "scores": [{"score": 100.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "smartLink SW-HT", "source": "cna", "vendor": "Softing"}, "product": "smartlink_sw-ht", "vendor": "softing"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.03]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[1.04,1.04]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "inferred", "scores": [{"score": 100.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "smartLink SW-PN", "source": "cna", "vendor": "Softing"}, "product": "smartlink_sw-pn", "vendor": "softing"}], "analysis": {"en": {"generated_at": "2026-03-17T11:22:43.848280+00:00", "value": {"mitigation_remediation": ["Apply vendor firmware update to smartLink SW-PN 1.04", "Apply vendor firmware update to smartLink SW-HT 1.43"], "summary": {"action": "Patch", "impact": "Heap Buffer Overflow"}, "threat_synthesis": {"affected_systems": "Softing smartLink SW-PN versions 1.03 and earlier, and softLink SW-HT versions 1.42 and earlier are affected. The vendor lists the affected products as Softing:smartLink SW-PN and Softing:smartLink SW-HT with the corresponding vulnerable firmware ranges.\n\n", "description_and_impact": "A heap\u2011based buffer overflow exists in Softing Industrial Automation GmbH smartLink SW-PN and SW-HT webserver modules. The flaw is triggered by an HTTP POST request with a specific higher content length, allowing the overflow of internal buffers. This vulnerability can potentially lead to arbitrary code execution or corruption of system memory, compromising the confidentiality, integrity, and availability of the affected device.", "risk_and_exploitability": "The CVSS score for this vulnerability is 7.7, indicating a high severity. EPSS data is not available, and the vulnerability is not present in the CISA KEV catalog. Based on the description, the likely attack vector is remote, involving a malicious HTTP POST request over the network. The exploitation requires sending a specially crafted payload to the webserver, and no additional conditions are stated. The risk is therefore high for organizations running affected firmware on exposed networks."}}}}, "created": "2026-03-17T09:52:56.807304+00:00", "updated": "2026-03-24T10:44:31.839289+00:00", "vendors": ["softing", "softing$PRODUCT$smartlink_sw-ht", "softing$PRODUCT$smartlink_sw-pn"]}