The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.

Summary

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

Timeline

1. May 12, 2026, 8:20 AM UTCCVE published
2. May 12, 2026, 1:30 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Aug 11, 2026, 12:20 PM UTCRecord last updated

Affected versions

• Siemens IE/PB LINK HA

  fixed in V4.1.2

• Siemens IE/PB link PN IO

  All versions

• Siemens RUGGEDCOM RM1224 LTE(4G) EU

  fixed in V8.3

• Siemens RUGGEDCOM RM1224 LTE(4G) NAM

  fixed in V8.3

• Siemens SCALANCE M804PB

  fixed in V8.3

• Siemens SCALANCE M812-1 ADSL-Router

  fixed in V8.3

• Siemens SCALANCE M812-1 ADSL-Router

  fixed in V8.3

• Siemens SCALANCE M816-1 ADSL-Router

  fixed in V8.3

• Siemens SCALANCE M816-1 ADSL-Router

  fixed in V8.3

• Siemens SCALANCE M826-2 SHDSL-Router

  fixed in V8.3

• Siemens SCALANCE M874-2

  fixed in V8.3

• Siemens SCALANCE M874-3

  fixed in V8.3

• Siemens SCALANCE M874-3 3G-Router (CN)

  fixed in V8.3

• Siemens SCALANCE M876-3

  fixed in V8.3

• Siemens SCALANCE M876-3 (ROK)

  fixed in V8.3

• Siemens SCALANCE M876-4

  fixed in V8.3

• Siemens SCALANCE M876-4 (EU)

  fixed in V8.3

• Siemens SCALANCE M876-4 (NAM)

  fixed in V8.3

• Siemens SCALANCE MUB852-1 (A1)

  fixed in V8.3

• Siemens SCALANCE MUB852-1 (B1)

  fixed in V8.3

• Siemens SCALANCE MUM853-1 (A1)

  fixed in V8.3

• Siemens SCALANCE MUM853-1 (B1)

  fixed in V8.3

• Siemens SCALANCE MUM853-1 (EU)

  fixed in V8.3

• Siemens SCALANCE MUM856-1 (A1)

  fixed in V8.3

• Siemens SCALANCE MUM856-1 (B1)

  fixed in V8.3

• Siemens SCALANCE MUM856-1 (CN)

  fixed in V8.3

• Siemens SCALANCE MUM856-1 (EU)

  fixed in V8.3

• Siemens SCALANCE MUM856-1 (RoW)

  fixed in V8.3

• Siemens SCALANCE S615 EEC LAN-Router

  fixed in V8.3

• Siemens SCALANCE S615 LAN-Router

  fixed in V8.3

• Siemens SCALANCE SC622-2C

  fixed in V3.2

• Siemens SCALANCE SC626-2C

  fixed in V3.2

• Siemens SCALANCE SC632-2C

  fixed in V3.2

• Siemens SCALANCE SC636-2C

  fixed in V3.2

• Siemens SCALANCE SC642-2C

  fixed in V3.2

• Siemens SCALANCE SC646-2C

  fixed in V3.2

• Siemens SCALANCE W1748-1 M12

  All versions

• Siemens SCALANCE W1748-1 M12

  All versions

• Siemens SCALANCE W1788-1 M12

  All versions

• Siemens SCALANCE W1788-2 EEC M12

  All versions

• Siemens SCALANCE W1788-2 M12

  All versions

• Siemens SCALANCE W1788-2IA M12

  All versions

• Siemens SCALANCE W721-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W721-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W722-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W722-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W722-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W734-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W734-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W734-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W734-1 RJ45 (USA)

  fixed in V6.6.0

• Siemens SCALANCE W738-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W738-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W748-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W748-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W748-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W748-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W761-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W761-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W774-1 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W774-1 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W774-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W774-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W774-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W774-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W774-1 RJ45 (USA)

  fixed in V6.6.0

• Siemens SCALANCE W778-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W778-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W778-1 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W778-1 M12 EEC (USA)

  fixed in V6.6.0

• Siemens SCALANCE W786-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-2 SFP

  fixed in V6.6.0

• Siemens SCALANCE W786-2 SFP

  fixed in V6.6.0

• Siemens SCALANCE W786-2IA RJ45

  fixed in V6.6.0

• Siemens SCALANCE W786-2IA RJ45

  fixed in V6.6.0

• Siemens SCALANCE W788-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W788-1 M12

  fixed in V6.6.0

• Siemens SCALANCE W788-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W788-1 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W788-2 M12

  fixed in V6.6.0

• Siemens SCALANCE W788-2 M12

  fixed in V6.6.0

• Siemens SCALANCE W788-2 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W788-2 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W788-2 M12 EEC

  fixed in V6.6.0

• Siemens SCALANCE W788-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W788-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE W788-2 RJ45

  fixed in V6.6.0

• Siemens SCALANCE WAB762-1

  fixed in V3.2.0

• Siemens SCALANCE WAM763-1

  fixed in V3.2.0

• Siemens SCALANCE WAM763-1 (ME)

  fixed in V3.2.0

• Siemens SCALANCE WAM763-1 (US)

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1 (ME)

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1 (US)

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1 EEC

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1 EEC (ME)

  fixed in V3.2.0

• Siemens SCALANCE WAM766-1 EEC (US)

  fixed in V3.2.0

• Siemens SCALANCE WUB762-1

  fixed in V3.2.0

• Siemens SCALANCE WUB762-1 iFeatures

  fixed in V3.2.0

• Siemens SCALANCE WUM763-1

  fixed in V3.2.0

• Siemens SCALANCE WUM763-1

  fixed in V3.2.0

• Siemens SCALANCE WUM763-1 (US)

  fixed in V3.2.0

• Siemens SCALANCE WUM763-1 (US)

  fixed in V3.2.0

• Siemens SCALANCE WUM766-1

  fixed in V3.2.0

• Siemens SCALANCE WUM766-1 (ME)

  fixed in V3.2.0

• Siemens SCALANCE WUM766-1 (USA)

  fixed in V3.2.0

• Siemens SCALANCE X204-2

  All versions

• Siemens SCALANCE X204-2FM

  All versions

• Siemens SCALANCE X204-2LD

  All versions

• Siemens SCALANCE X204-2LD TS

  All versions

• Siemens SCALANCE X204-2TS

  All versions

• Siemens SCALANCE X206-1

  All versions

• Siemens SCALANCE X206-1LD

  All versions

• Siemens SCALANCE X208

  All versions

• Siemens SCALANCE X208PRO

  All versions

• Siemens SCALANCE X212-2

  All versions

• Siemens SCALANCE X212-2LD

  All versions

• Siemens SCALANCE X216

  All versions

• Siemens SCALANCE X224

  All versions

• Siemens SCALANCE X302-7 EEC (230V, coated)

  All versions

• Siemens SCALANCE X302-7 EEC (230V)

  All versions

• Siemens SCALANCE X302-7 EEC (24V, coated)

  All versions

• Siemens SCALANCE X302-7 EEC (24V)

  All versions

• Siemens SCALANCE X302-7 EEC (2x 230V, coated)

  All versions

• Siemens SCALANCE X302-7 EEC (2x 230V)

  All versions

• Siemens SCALANCE X302-7 EEC (2x 24V, coated)

  All versions

• Siemens SCALANCE X302-7 EEC (2x 24V)

  All versions

• Siemens SCALANCE X304-2FE

  All versions

• Siemens SCALANCE X306-1LD FE

  All versions

• Siemens SCALANCE X307-2 EEC (230V, coated)

  All versions

• Siemens SCALANCE X307-2 EEC (230V)

  All versions

• Siemens SCALANCE X307-2 EEC (24V, coated)

  All versions

• Siemens SCALANCE X307-2 EEC (24V)

  All versions

• Siemens SCALANCE X307-2 EEC (2x 230V, coated)

  All versions

• Siemens SCALANCE X307-2 EEC (2x 230V)

  All versions

• Siemens SCALANCE X307-2 EEC (2x 24V, coated)

  All versions

• Siemens SCALANCE X307-2 EEC (2x 24V)

  All versions

• Siemens SCALANCE X307-3

  All versions

• Siemens SCALANCE X307-3

  All versions

• Siemens SCALANCE X307-3LD

  All versions

• Siemens SCALANCE X307-3LD

  All versions

• Siemens SCALANCE X308-2

  All versions

• Siemens SCALANCE X308-2 RD (inkl. SIPLUS variants)

  All versions

• Siemens SCALANCE X308-2LD

  All versions

• Siemens SCALANCE X308-2LD

  All versions

• Siemens SCALANCE X308-2LH

  All versions

• Siemens SCALANCE X308-2LH

  All versions

• Siemens SCALANCE X308-2LH+

  All versions

• Siemens SCALANCE X308-2LH+

  All versions

• Siemens SCALANCE X308-2M

  All versions

• Siemens SCALANCE X308-2M

  All versions

• Siemens SCALANCE X308-2M PoE

  All versions

• Siemens SCALANCE X308-2M PoE

  All versions

• Siemens SCALANCE X308-2M TS

  All versions

• Siemens SCALANCE X308-2M TS

  All versions

• Siemens SCALANCE X310

  All versions

• Siemens SCALANCE X310

  All versions

• Siemens SCALANCE X310FE

  All versions

• Siemens SCALANCE X310FE

  All versions

• Siemens SCALANCE X320-1 FE

  All versions

• Siemens SCALANCE X320-1-2LD FE

  All versions

• Siemens SCALANCE X408-2

  All versions

• Siemens SCALANCE XF204

  All versions

• Siemens SCALANCE XF204-2

  All versions

• Siemens SCALANCE XF206-1

  All versions

• Siemens SCALANCE XF208

  All versions

• Siemens SCALANCE XM408-4C

  All versions

• Siemens SCALANCE XM408-4C (L3 int.)

  All versions

• Siemens SCALANCE XM408-8C

  All versions

• Siemens SCALANCE XM408-8C (L3 int.)

  All versions

• Siemens SCALANCE XM416-4C

  All versions

• Siemens SCALANCE XM416-4C (L3 int.)

  All versions

• Siemens SCALANCE XR324-12M (230V, ports on front)

  All versions

• Siemens SCALANCE XR324-12M (230V, ports on front)

  All versions

• Siemens SCALANCE XR324-12M (230V, ports on rear)

  All versions

• Siemens SCALANCE XR324-12M (230V, ports on rear)

  All versions

• Siemens SCALANCE XR324-12M (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-12M (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-12M (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-12M (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-12M TS (24V)

  All versions

• Siemens SCALANCE XR324-12M TS (24V)

  All versions

• Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M PoE (230V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M PoE (230V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M PoE (230V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M PoE (230V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M PoE (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M PoE (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M PoE (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M PoE (24V, ports on rear)

  All versions

• Siemens SCALANCE XR324-4M PoE TS (24V, ports on front)

  All versions

• Siemens SCALANCE XR324-4M PoE TS (24V, ports on front)

  All versions

• Siemens SCALANCE XR524-8C, 1x230V

  All versions

• Siemens SCALANCE XR524-8C, 1x230V (L3 int.)

  All versions

• Siemens SCALANCE XR524-8C, 24V

  All versions

• Siemens SCALANCE XR524-8C, 24V (L3 int.)

  All versions

• Siemens SCALANCE XR524-8C, 2x230V

  All versions

• Siemens SCALANCE XR524-8C, 2x230V (L3 int.)

  All versions

• Siemens SCALANCE XR526-8C, 1x230V

  All versions

• Siemens SCALANCE XR526-8C, 1x230V (L3 int.)

  All versions

• Siemens SCALANCE XR526-8C, 24V

  All versions

• Siemens SCALANCE XR526-8C, 24V (L3 int.)

  All versions

• Siemens SCALANCE XR526-8C, 2x230V

  All versions

• Siemens SCALANCE XR526-8C, 2x230V (L3 int.)

  All versions

• Siemens SCALANCE XR528-6M

  All versions

• Siemens SCALANCE XR528-6M (2HR2, L3 int.)

  All versions

• Siemens SCALANCE XR528-6M (2HR2)

  All versions

• Siemens SCALANCE XR528-6M (L3 int.)

  All versions

• Siemens SCALANCE XR552-12M

  All versions

• Siemens SCALANCE XR552-12M (2HR2, L3 int.)

  All versions

• Siemens SCALANCE XR552-12M (2HR2)

  All versions

• Siemens SCALANCE XR552-12M (2HR2)

  All versions

• Siemens SIMATIC CFU DIQ

  fixed in V2.0.0

• Siemens SIMATIC CFU PA

  fixed in V2.0.0

• Siemens SIMATIC CFU PA

  fixed in V2.0.0

• Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU

  All versions

• Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU

  All versions

• Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU

  All versions

• Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU

  All versions

• Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU

  All versions

• Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN

  All versions

• Siemens SIMATIC ET 200SP CPU 1510SP-1 PN

  All versions

• Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN

  All versions

• Siemens SIMATIC ET 200SP CPU 1512SP-1 PN

  All versions

• Siemens SIMATIC ET 200SP HA IM155-6 PN

  fixed in V1.3

• Siemens SIMATIC S7-1500 CPU 1511-1 PN

  All versions

• Siemens SIMATIC S7-1500 CPU 1511F-1 PN

  All versions

• Siemens SIMATIC S7-1500 CPU 1513-1 PN

  All versions

• Siemens SIMATIC S7-1500 CPU 1515-2 PN

  All versions

• Siemens SIMATIC S7-1500 CPU 1515F-2 PN

  All versions

• Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP

  All versions

• Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 314C-2 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 315-2 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 315F-2 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 315T-3 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 317-2 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 317F-2 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 317T-3 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 319-3 PN/DP

  All versions

• Siemens SIMATIC S7-300 CPU 319F-3 PN/DP

  All versions

• Siemens SIMATIC S7-400 CPU 412-2 PN V7

  All versions

• Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7

  All versions

• Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

  All versions

• Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

  fixed in V10.2

• Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

  fixed in V8.3

• Siemens SIMIT UNIT V10

  All versions

• Siemens SIMIT UNIT V11

  All versions

• Siemens SINAMICS CBE20

  All versions

• Siemens SINAMICS G115D

  All versions

• Siemens SINAMICS G120 (incl. SIPLUS variants)

  All versions

• Siemens SINAMICS G120C

  All versions

• Siemens SINAMICS G120D

  All versions

• Siemens SINAMICS G120X

  All versions

• Siemens SINAMICS G120XA

  All versions

• Siemens SINAMICS G130

  All versions

• Siemens SINAMICS G150

  All versions

• Siemens SINAMICS S110

  All versions

• Siemens SINAMICS S120 (incl. SIPLUS variants)

  All versions

• Siemens SINAMICS S150

  All versions

• Siemens SINUMERIK 840D sl

  All versions

• Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU

  All versions

• Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU

  All versions

• Siemens SIPLUS NET IE/PB link PN IO

  All versions

• Siemens SIPLUS S7-300 CPU 314C-2 PN/DP

  All versions

• Siemens SIPLUS S7-300 CPU 315-2 PN/DP

  All versions

• Siemens SIPLUS S7-300 CPU 315F-2 PN/DP

  All versions

• Siemens SIPLUS S7-300 CPU 317-2 PN/DP

  All versions

• Siemens SIPLUS S7-300 CPU 317F-2 PN/DP

  All versions

• Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7

  All versions

• Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7

  All versions

• Siemens SITOP PSU8600 1AC 20 A/4x5 A PN

  All versions

• Siemens SITOP PSU8600 3AC 20 A PN

  All versions

• Siemens SITOP PSU8600 3AC 20 A/4x5 A PN

  All versions

• Siemens SITOP PSU8600 3AC 40 A PN

  All versions

• Siemens SITOP PSU8600 3AC 40 A/4x10 A PN

  All versions

• Siemens SITOP PSU8600 3AC 40 A/4x10A EIP

  All versions

• Siemens SITOP UPS1600 10 A Ethernet/ PROFINET

  All versions

• Siemens SITOP UPS1600 20 A Ethernet/ PROFINET

  All versions

• Siemens SITOP UPS1600 40 A Ethernet/ PROFINET

  All versions

• Siemens SITOP UPS1600 EX 20 A Ethernet PROFINET

  All versions

References 1