PT-2026-25710 · Softing · Smartlink Sw-Ht+1

Openvas · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2025-10461

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:L/U:Green

Name of the Vulnerable Software and Affected Versions Softing Industrial Automation GmbH smartLinks versions through 1.42 Softing Industrial Automation GmbH smartLinks SW-PN versions through 1.03

Description An issue exists in the webserver component of Softing Industrial Automation GmbH smartLinks, specifically within the filesystem modules on docker. Improper URL checks can lead to global file reads, potentially allowing unauthorized file access.

Recommendations Update smartLinks to a version later than 1.42. Update smartLinks SW-PN to a version later than 1.03.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-10461

Produtos afetados

Smartlink Sw-Ht

Smartlink Hw-Pn

Referências · 6

• https://twitter.com/CVEnew/status/2033583637866942616 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-10461 · Nota de Segurança
• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.json · Nota
• https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.html · Nota
• https://https//industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.json · Nota
• https://https//industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.html · Nota