Log in Start free

Vulnerability · Published May 12, 2026 · Assigned by siemens

CVE-2025-40833

High 7.5

In plain English

A high-severity null pointer dereference in IE/PB LINK HA from Siemens. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 74.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

Affected products (as reported)

VendorProductVersions
Siemens IE/PB LINK HA 0 – before V4.1.2
Siemens IE/PB link PN IO 0 – before *
Siemens RUGGEDCOM RM1224 LTE(4G) EU 0 – before V8.3
Siemens RUGGEDCOM RM1224 LTE(4G) NAM 0 – before V8.3
Siemens SCALANCE M804PB 0 – before V8.3
Siemens SCALANCE M812-1 ADSL-Router 0 – before V8.3
Siemens SCALANCE M812-1 ADSL-Router 0 – before V8.3
Siemens SCALANCE M816-1 ADSL-Router 0 – before V8.3
Siemens SCALANCE M816-1 ADSL-Router 0 – before V8.3
Siemens SCALANCE M826-2 SHDSL-Router 0 – before V8.3
Siemens SCALANCE M874-2 0 – before V8.3
Siemens SCALANCE M874-3 0 – before V8.3
Siemens SCALANCE M874-3 3G-Router (CN) 0 – before V8.3
Siemens SCALANCE M876-3 0 – before V8.3
Siemens SCALANCE M876-3 (ROK) 0 – before V8.3
Siemens SCALANCE M876-4 0 – before V8.3
Siemens SCALANCE M876-4 (EU) 0 – before V8.3
Siemens SCALANCE M876-4 (NAM) 0 – before V8.3
Siemens SCALANCE MUB852-1 (A1) 0 – before V8.3
Siemens SCALANCE MUB852-1 (B1) 0 – before V8.3
Siemens SCALANCE MUM853-1 (A1) 0 – before V8.3
Siemens SCALANCE MUM853-1 (B1) 0 – before V8.3
Siemens SCALANCE MUM853-1 (EU) 0 – before V8.3
Siemens SCALANCE MUM856-1 (A1) 0 – before V8.3
Siemens SCALANCE MUM856-1 (B1) 0 – before V8.3
Siemens SCALANCE MUM856-1 (CN) 0 – before V8.3
Siemens SCALANCE MUM856-1 (EU) 0 – before V8.3
Siemens SCALANCE MUM856-1 (RoW) 0 – before V8.3
Siemens SCALANCE S615 EEC LAN-Router 0 – before V8.3
Siemens SCALANCE S615 LAN-Router 0 – before V8.3

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References