← All Advisories

CVE-2025-40833

Last refreshed2026-10-06

Status: UPDATED  |  Advisory ID: CVE-2025-40833

Key Details

CVECVE-2025-40833
CVSS Score / Version7.5 (High) / CVSS v3.1
Updated2026-08-11
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Proseattack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected productssee table below
Classified asCWE-476 (NULL Pointer Dereference)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
SiemensIE/PB LINK HA
SiemensIE/PB link PN IO
SiemensRUGGEDCOM RM1224 LTE(4G) EU
SiemensRUGGEDCOM RM1224 LTE(4G) NAM
SiemensSCALANCE M804PB
SiemensSCALANCE M812-1 ADSL-Router
SiemensSCALANCE M816-1 ADSL-Router
SiemensSCALANCE M826-2 SHDSL-Router
SiemensSCALANCE M874-2
SiemensSCALANCE M874-3
SiemensSCALANCE M874-3 3G-Router (CN)
SiemensSCALANCE M876-3
SiemensSCALANCE M876-3 (ROK)
SiemensSCALANCE M876-4
SiemensSCALANCE M876-4 (EU)
SiemensSCALANCE M876-4 (NAM)
SiemensSCALANCE MUB852-1 (A1)
SiemensSCALANCE MUB852-1 (B1)
SiemensSCALANCE MUM853-1 (A1)
SiemensSCALANCE MUM853-1 (B1)
SiemensSCALANCE MUM853-1 (EU)
SiemensSCALANCE MUM856-1 (A1)
SiemensSCALANCE MUM856-1 (B1)
SiemensSCALANCE MUM856-1 (CN)
SiemensSCALANCE MUM856-1 (EU)
SiemensSCALANCE MUM856-1 (RoW)
SiemensSCALANCE S615 EEC LAN-Router
SiemensSCALANCE S615 LAN-Router
SiemensSCALANCE SC622-2C
SiemensSCALANCE SC626-2C
SiemensSCALANCE SC632-2C
SiemensSCALANCE SC636-2C
SiemensSCALANCE SC642-2C
SiemensSCALANCE SC646-2C
SiemensSCALANCE W1748-1 M12
SiemensSCALANCE W1788-1 M12
SiemensSCALANCE W1788-2 EEC M12
SiemensSCALANCE W1788-2 M12
SiemensSCALANCE W1788-2IA M12
SiemensSCALANCE W721-1 RJ45
SiemensSCALANCE W722-1 RJ45
SiemensSCALANCE W734-1 RJ45
SiemensSCALANCE W734-1 RJ45 (USA)
SiemensSCALANCE W738-1 M12
SiemensSCALANCE W748-1 M12
SiemensSCALANCE W748-1 RJ45
SiemensSCALANCE W761-1 RJ45
SiemensSCALANCE W774-1 M12 EEC
SiemensSCALANCE W774-1 RJ45
SiemensSCALANCE W774-1 RJ45 (USA)
SiemensSCALANCE W778-1 M12
SiemensSCALANCE W778-1 M12 EEC
SiemensSCALANCE W778-1 M12 EEC (USA)
SiemensSCALANCE W786-1 RJ45
SiemensSCALANCE W786-2 RJ45
SiemensSCALANCE W786-2 SFP
SiemensSCALANCE W786-2IA RJ45
SiemensSCALANCE W788-1 M12
SiemensSCALANCE W788-1 RJ45
SiemensSCALANCE W788-2 M12
SiemensSCALANCE W788-2 M12 EEC
SiemensSCALANCE W788-2 RJ45
SiemensSCALANCE WAB762-1
SiemensSCALANCE WAM763-1
SiemensSCALANCE WAM763-1 (ME)
SiemensSCALANCE WAM763-1 (US)
SiemensSCALANCE WAM766-1
SiemensSCALANCE WAM766-1 (ME)
SiemensSCALANCE WAM766-1 (US)
SiemensSCALANCE WAM766-1 EEC
SiemensSCALANCE WAM766-1 EEC (ME)
SiemensSCALANCE WAM766-1 EEC (US)
SiemensSCALANCE WUB762-1
SiemensSCALANCE WUB762-1 iFeatures
SiemensSCALANCE WUM763-1
SiemensSCALANCE WUM763-1 (US)
SiemensSCALANCE WUM766-1
SiemensSCALANCE WUM766-1 (ME)
SiemensSCALANCE WUM766-1 (USA)
SiemensSCALANCE X204-2
SiemensSCALANCE X204-2FM
SiemensSCALANCE X204-2LD
SiemensSCALANCE X204-2LD TS
SiemensSCALANCE X204-2TS
SiemensSCALANCE X206-1
SiemensSCALANCE X206-1LD
SiemensSCALANCE X208
SiemensSCALANCE X208PRO
SiemensSCALANCE X212-2
SiemensSCALANCE X212-2LD
SiemensSCALANCE X216
SiemensSCALANCE X224
SiemensSCALANCE X302-7 EEC (230V, coated)
SiemensSCALANCE X302-7 EEC (230V)
SiemensSCALANCE X302-7 EEC (24V, coated)
SiemensSCALANCE X302-7 EEC (24V)
SiemensSCALANCE X302-7 EEC (2x 230V, coated)
SiemensSCALANCE X302-7 EEC (2x 230V)
SiemensSCALANCE X302-7 EEC (2x 24V, coated)
SiemensSCALANCE X302-7 EEC (2x 24V)
SiemensSCALANCE X304-2FE
SiemensSCALANCE X306-1LD FE
SiemensSCALANCE X307-2 EEC (230V, coated)
SiemensSCALANCE X307-2 EEC (230V)
SiemensSCALANCE X307-2 EEC (24V, coated)
SiemensSCALANCE X307-2 EEC (24V)
SiemensSCALANCE X307-2 EEC (2x 230V, coated)
SiemensSCALANCE X307-2 EEC (2x 230V)
SiemensSCALANCE X307-2 EEC (2x 24V, coated)
SiemensSCALANCE X307-2 EEC (2x 24V)
SiemensSCALANCE X307-3
SiemensSCALANCE X307-3LD
SiemensSCALANCE X308-2
SiemensSCALANCE X308-2 RD (inkl. SIPLUS variants)
SiemensSCALANCE X308-2LD
SiemensSCALANCE X308-2LH
SiemensSCALANCE X308-2LH+
SiemensSCALANCE X308-2M
SiemensSCALANCE X308-2M PoE
SiemensSCALANCE X308-2M TS
SiemensSCALANCE X310
SiemensSCALANCE X310FE
SiemensSCALANCE X320-1 FE
SiemensSCALANCE X320-1-2LD FE
SiemensSCALANCE X408-2
SiemensSCALANCE XF204
SiemensSCALANCE XF204-2
SiemensSCALANCE XF206-1
SiemensSCALANCE XF208
SiemensSCALANCE XM408-4C
SiemensSCALANCE XM408-4C (L3 int.)
SiemensSCALANCE XM408-8C
SiemensSCALANCE XM408-8C (L3 int.)
SiemensSCALANCE XM416-4C
SiemensSCALANCE XM416-4C (L3 int.)
SiemensSCALANCE XR324-12M (230V, ports on front)
SiemensSCALANCE XR324-12M (230V, ports on rear)
SiemensSCALANCE XR324-12M (24V, ports on front)
SiemensSCALANCE XR324-12M (24V, ports on rear)
SiemensSCALANCE XR324-12M TS (24V)
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)
SiemensSCALANCE XR324-4M EEC (24V, ports on front)
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)
SiemensSCALANCE XR324-4M PoE (230V, ports on front)
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)
SiemensSCALANCE XR324-4M PoE (24V, ports on front)
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)
SiemensSCALANCE XR524-8C, 1x230V
SiemensSCALANCE XR524-8C, 1x230V (L3 int.)
SiemensSCALANCE XR524-8C, 24V
SiemensSCALANCE XR524-8C, 24V (L3 int.)
SiemensSCALANCE XR524-8C, 2x230V
SiemensSCALANCE XR524-8C, 2x230V (L3 int.)
SiemensSCALANCE XR526-8C, 1x230V
SiemensSCALANCE XR526-8C, 1x230V (L3 int.)
SiemensSCALANCE XR526-8C, 24V
SiemensSCALANCE XR526-8C, 24V (L3 int.)
SiemensSCALANCE XR526-8C, 2x230V
SiemensSCALANCE XR526-8C, 2x230V (L3 int.)
SiemensSCALANCE XR528-6M
SiemensSCALANCE XR528-6M (2HR2, L3 int.)
SiemensSCALANCE XR528-6M (2HR2)
SiemensSCALANCE XR528-6M (L3 int.)
SiemensSCALANCE XR552-12M
SiemensSCALANCE XR552-12M (2HR2, L3 int.)
SiemensSCALANCE XR552-12M (2HR2)
SiemensSIMATIC CFU DIQ
SiemensSIMATIC CFU PA
SiemensSIMATIC ET 200pro IM 154-8 PN/DP CPU
SiemensSIMATIC ET 200pro IM 154-8F PN/DP CPU
SiemensSIMATIC ET 200pro IM 154-8FX PN/DP CPU
SiemensSIMATIC ET 200S IM 151-8 PN/DP CPU
SiemensSIMATIC ET 200S IM 151-8F PN/DP CPU
SiemensSIMATIC ET 200SP CPU 1510SP F-1 PN
SiemensSIMATIC ET 200SP CPU 1510SP-1 PN
SiemensSIMATIC ET 200SP CPU 1512SP F-1 PN
SiemensSIMATIC ET 200SP CPU 1512SP-1 PN
SiemensSIMATIC ET 200SP HA IM155-6 PN
SiemensSIMATIC S7-1500 CPU 1511-1 PN
SiemensSIMATIC S7-1500 CPU 1511F-1 PN
SiemensSIMATIC S7-1500 CPU 1513-1 PN
SiemensSIMATIC S7-1500 CPU 1515-2 PN
SiemensSIMATIC S7-1500 CPU 1515F-2 PN
SiemensSIMATIC S7-1500 CPU 1516-3 PN/DP
SiemensSIMATIC S7-1500 CPU 1516F-3 PN/DP
SiemensSIMATIC S7-300 CPU 314C-2 PN/DP
SiemensSIMATIC S7-300 CPU 315-2 PN/DP
SiemensSIMATIC S7-300 CPU 315F-2 PN/DP
SiemensSIMATIC S7-300 CPU 315T-3 PN/DP
SiemensSIMATIC S7-300 CPU 317-2 PN/DP
SiemensSIMATIC S7-300 CPU 317F-2 PN/DP
SiemensSIMATIC S7-300 CPU 317T-3 PN/DP
SiemensSIMATIC S7-300 CPU 317TF-3 PN/DP
SiemensSIMATIC S7-300 CPU 319-3 PN/DP
SiemensSIMATIC S7-300 CPU 319F-3 PN/DP
SiemensSIMATIC S7-400 CPU 412-2 PN V7
SiemensSIMATIC S7-400 CPU 414-3 PN/DP V7
SiemensSIMATIC S7-400 CPU 414F-3 PN/DP V7
SiemensSIMATIC S7-400 CPU 416-3 PN/DP V7
SiemensSIMATIC S7-400 CPU 416F-3 PN/DP V7
SiemensSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)
SiemensSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)
SiemensSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)
SiemensSIMIT UNIT V10
SiemensSIMIT UNIT V11
SiemensSINAMICS CBE20
SiemensSINAMICS G115D
SiemensSINAMICS G120 (incl. SIPLUS variants)
SiemensSINAMICS G120C
SiemensSINAMICS G120D
SiemensSINAMICS G120X
SiemensSINAMICS G120XA
SiemensSINAMICS G130
SiemensSINAMICS G150
SiemensSINAMICS S110
SiemensSINAMICS S120 (incl. SIPLUS variants)
SiemensSINAMICS S150
SiemensSINUMERIK 840D sl
SiemensSIPLUS ET 200S IM 151-8 PN/DP CPU
SiemensSIPLUS ET 200S IM 151-8F PN/DP CPU
SiemensSIPLUS NET IE/PB link PN IO
SiemensSIPLUS S7-300 CPU 314C-2 PN/DP
SiemensSIPLUS S7-300 CPU 315-2 PN/DP
SiemensSIPLUS S7-300 CPU 315F-2 PN/DP
SiemensSIPLUS S7-300 CPU 317-2 PN/DP
SiemensSIPLUS S7-300 CPU 317F-2 PN/DP
SiemensSIPLUS S7-400 CPU 414-3 PN/DP V7
SiemensSIPLUS S7-400 CPU 416-3 PN/DP V7
SiemensSITOP PSU8600 1AC 20 A/4x5 A PN
SiemensSITOP PSU8600 3AC 20 A PN
SiemensSITOP PSU8600 3AC 20 A/4x5 A PN
SiemensSITOP PSU8600 3AC 40 A PN
SiemensSITOP PSU8600 3AC 40 A/4x10 A PN
SiemensSITOP PSU8600 3AC 40 A/4x10A EIP
SiemensSITOP UPS1600 10 A Ethernet/ PROFINET
SiemensSITOP UPS1600 20 A Ethernet/ PROFINET
SiemensSITOP UPS1600 40 A Ethernet/ PROFINET
SiemensSITOP UPS1600 EX 20 A Ethernet PROFINET
SubsystemsGeneral OT
SectorsMultiple

What to Know

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system. (NVD)

What to Do

Monitor Siemens's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-40833
CVEhttps://www.cve.org/CVERecord?id=CVE-2025-40833

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE