This vulnerability (CWE-416) involves a use-after-free condition in the webserver of Softing smartLink HW-DP and HW-PN devices. When exploited, it allows an attacker to cause a denial of service by sending crafted HTTP requests. Affected versions include smartLink HW-DP through 1.31 and smartLink HW-PN before 1.02. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no impact on confidentiality or integrity, but high impact on availability.

Exploitation of this vulnerability results in denial of service (DoS) against the affected device's webserver, impacting availability. There is no impact on confidentiality or integrity. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of the affected devices' webserver interfaces to untrusted networks and monitor for unusual HTTP traffic patterns that could indicate exploitation attempts.