Softing Smartlink Hw-Pn vulnerabilities

3 CVEs affecting Softing Smartlink Hw-Pn, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13148, published 2026-09-04.

More from Softing.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-7339, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers. This issue affects pnGate: through 1.30 epGate: through 1.30 mbGate: through…
• CVE-2026-13148, published 2026-09-04. Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days. Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10.
• CVE-2024-14028, published 2026-03-27. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS. This issue affects: smartLink HW-DP: through 1.31 smartLink HW-PN: before 1.02.