Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-10461

Global file reads caused by improper URL checks in webserver

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Softing

Description

Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access. This issue affects smartLink SW-HT: through 1.42 smartLink SW-PN: through 1.03.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softing smartLink SW-HT

Default version status: unaffected

  • 0 to ≤ 1.42affected
  • 1.43unaffected

Softing smartLink SW-PN

Default version status: unaffected

  • 0 to ≤ 1.03affected
  • 1.04unaffected

References