Description (CNA)
Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Softing / smartLink SW-HT | affected 0 through 1.42; unaffected 1.43 |
| Softing / smartLink SW-PN | affected 0 through 1.03; unaffected 1.04 |
CWE
CWE-20
References
- https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.html
- https://industrial.softing.com/fileadmin/psirt/downloads/2025/CVE-2025-10461.json
ADP enrichment
No English description supplied.
No references supplied.