Skip to content
OpenAdvisories
High · 7.7 CVE-2025-10685 EUVD-2025-208727GHSA-9r22-hfr9-vvx7

HTTP POST with specific higher content length leads into heap corruption

Published Mar 16, 2026 · Updated Mar 27, 2026 · Assigned by Softing

Description

Heap-based buffer overflow vulnerability in Softing Industrial Automation GmbH smartLink SW-PN and smartLink SW-HT (Webserver modules) allows overflow buffers.This issue affects:

smartLink SW-PN: through 1.03

smartLink SW-HT: through 1.42

Affected products

VendorProductAffectedFixed
Softing smartLink SW-PN ≤ 1.03 1.04
Softing smartLink SW-HT ≤ 1.42 1.43

References