Softing Smartlink Hw-Dp vulnerabilities

3 CVEs affecting Softing Smartlink Hw-Dp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-7339, published 2026-03-27.

More from Softing.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-40872, published 2021-11-10. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service (DoS) or login as an anonymous user (bypassing security checks)…
• CVE-2023-7339, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGate: through…
• CVE-2024-14028, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02.