CVSS · MEDIUM · 6.3⁄10 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:L/AU:Y/R:A/RE:L/U:Red
Scoring scenario: GENERAL
attackVector:NETWORK
attackComplexity:LOW
attackRequirements:NONE
privilegesRequired:LOW
userInteraction:NONE
vulnConfidentialityImpact:NONE
subConfidentialityImpact:NONE
vulnIntegrityImpact:NONE
subIntegrityImpact:HIGH
vulnAvailabilityImpact:NONE
subAvailabilityImpact:LOW
exploitMaturity:NOT_DEFINED
Safety:NOT_DEFINED
Automatable:YES
Recovery:AUTOMATIC
valueDensity:NOT_DEFINED
vulnerabilityResponseEffort:LOW
providerUrgency:RED
CVE-2026-13148 Memory leak in scan method
Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure.
This issue affects smartLink HW-PN: from 1.04 before 1.10.
Problem: CWE-401 Missing release of memory after effective lifetime CWE-401
Impact: CAPEC-131 Resource Leak Exposure CAPEC-131
| Product | Affected | Unaffected |
|---|---|---|
| Softing smartLink HW-PN Default status is unaffected | from 1.04 before 1.10 | |
| 1.10 |
CPE Applicability:
CPE Applicability (based on the Affected products section)
-
- cpe:2.3:a:softing:smartlink_hw-pn:*:*:*:*:*:*:*:* is vulnerable from (including) 1.04 and up to (excluding) 1.10
- OR cpe:2.3:a:softing:smartlink_hw-pn:1.10:*:*:*:*:*:*:* is not vulnerable