CVE-2025-40833

Summary

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

Affected Software

VendorProductVersion RangeStatus
SiemensIE/PB LINK HA0 < *affected
SiemensIE/PB link PN IO0 < *affected
SiemensRUGGEDCOM RM1224 LTE(4G) EU0 < V8.3affected
SiemensRUGGEDCOM RM1224 LTE(4G) NAM0 < V8.3affected
SiemensSCALANCE M804PB0 < V8.3affected
SiemensSCALANCE M812-1 ADSL-Router0 < V8.3affected
SiemensSCALANCE M812-1 ADSL-Router0 < V8.3affected
SiemensSCALANCE M816-1 ADSL-Router0 < V8.3affected
SiemensSCALANCE M816-1 ADSL-Router0 < V8.3affected
SiemensSCALANCE M826-2 SHDSL-Router0 < V8.3affected
SiemensSCALANCE M874-20 < V8.3affected
SiemensSCALANCE M874-30 < V8.3affected
SiemensSCALANCE M874-3 3G-Router (CN)0 < V8.3affected
SiemensSCALANCE M876-30 < V8.3affected
SiemensSCALANCE M876-3 (ROK)0 < V8.3affected
SiemensSCALANCE M876-40 < V8.3affected
SiemensSCALANCE M876-4 (EU)0 < V8.3affected
SiemensSCALANCE M876-4 (NAM)0 < V8.3affected
SiemensSCALANCE MUB852-1 (A1)0 < V8.3affected
SiemensSCALANCE MUB852-1 (B1)0 < V8.3affected
SiemensSCALANCE MUM853-1 (A1)0 < V8.3affected
SiemensSCALANCE MUM853-1 (B1)0 < V8.3affected
SiemensSCALANCE MUM853-1 (EU)0 < V8.3affected
SiemensSCALANCE MUM856-1 (A1)0 < V8.3affected
SiemensSCALANCE MUM856-1 (B1)0 < V8.3affected
SiemensSCALANCE MUM856-1 (CN)0 < V8.3affected
SiemensSCALANCE MUM856-1 (EU)0 < V8.3affected
SiemensSCALANCE MUM856-1 (RoW)0 < V8.3affected
SiemensSCALANCE S615 EEC LAN-Router0 < V8.3affected
SiemensSCALANCE S615 LAN-Router0 < V8.3affected
SiemensSCALANCE SC622-2C0 < *affected
SiemensSCALANCE SC626-2C0 < *affected
SiemensSCALANCE SC632-2C0 < *affected
SiemensSCALANCE SC636-2C0 < *affected
SiemensSCALANCE SC642-2C0 < *affected
SiemensSCALANCE SC646-2C0 < *affected
SiemensSCALANCE W1748-1 M120 < *affected
SiemensSCALANCE W1748-1 M120 < *affected
SiemensSCALANCE W1788-1 M120 < *affected
SiemensSCALANCE W1788-2 EEC M120 < *affected
SiemensSCALANCE W1788-2 M120 < *affected
SiemensSCALANCE W1788-2IA M120 < *affected
SiemensSCALANCE W721-1 RJ450 < V6.6.0affected
SiemensSCALANCE W721-1 RJ450 < V6.6.0affected
SiemensSCALANCE W722-1 RJ450 < V6.6.0affected
SiemensSCALANCE W722-1 RJ450 < V6.6.0affected
SiemensSCALANCE W722-1 RJ450 < V6.6.0affected
SiemensSCALANCE W734-1 RJ450 < V6.6.0affected
SiemensSCALANCE W734-1 RJ450 < V6.6.0affected
SiemensSCALANCE W734-1 RJ450 < V6.6.0affected
SiemensSCALANCE W734-1 RJ45 (USA)0 < V6.6.0affected
SiemensSCALANCE W738-1 M120 < V6.6.0affected
SiemensSCALANCE W738-1 M120 < V6.6.0affected
SiemensSCALANCE W748-1 M120 < V6.6.0affected
SiemensSCALANCE W748-1 M120 < V6.6.0affected
SiemensSCALANCE W748-1 RJ450 < V6.6.0affected
SiemensSCALANCE W748-1 RJ450 < V6.6.0affected
SiemensSCALANCE W761-1 RJ450 < V6.6.0affected
SiemensSCALANCE W761-1 RJ450 < V6.6.0affected
SiemensSCALANCE W774-1 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W774-1 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W774-1 RJ450 < V6.6.0affected
SiemensSCALANCE W774-1 RJ450 < V6.6.0affected
SiemensSCALANCE W774-1 RJ450 < V6.6.0affected
SiemensSCALANCE W774-1 RJ450 < V6.6.0affected
SiemensSCALANCE W774-1 RJ45 (USA)0 < V6.6.0affected
SiemensSCALANCE W778-1 M120 < V6.6.0affected
SiemensSCALANCE W778-1 M120 < V6.6.0affected
SiemensSCALANCE W778-1 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W778-1 M12 EEC (USA)0 < V6.6.0affected
SiemensSCALANCE W786-1 RJ450 < V6.6.0affected
SiemensSCALANCE W786-1 RJ450 < V6.6.0affected
SiemensSCALANCE W786-2 RJ450 < V6.6.0affected
SiemensSCALANCE W786-2 RJ450 < V6.6.0affected
SiemensSCALANCE W786-2 RJ450 < V6.6.0affected
SiemensSCALANCE W786-2 SFP0 < V6.6.0affected
SiemensSCALANCE W786-2 SFP0 < V6.6.0affected
SiemensSCALANCE W786-2IA RJ450 < V6.6.0affected
SiemensSCALANCE W786-2IA RJ450 < V6.6.0affected
SiemensSCALANCE W788-1 M120 < V6.6.0affected
SiemensSCALANCE W788-1 M120 < V6.6.0affected
SiemensSCALANCE W788-1 RJ450 < V6.6.0affected
SiemensSCALANCE W788-1 RJ450 < V6.6.0affected
SiemensSCALANCE W788-2 M120 < V6.6.0affected
SiemensSCALANCE W788-2 M120 < V6.6.0affected
SiemensSCALANCE W788-2 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W788-2 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W788-2 M12 EEC0 < V6.6.0affected
SiemensSCALANCE W788-2 RJ450 < V6.6.0affected
SiemensSCALANCE W788-2 RJ450 < V6.6.0affected
SiemensSCALANCE W788-2 RJ450 < V6.6.0affected
SiemensSCALANCE WAB762-10 < V3.2.0affected
SiemensSCALANCE WAM763-10 < V3.2.0affected
SiemensSCALANCE WAM763-1 (ME)0 < V3.2.0affected
SiemensSCALANCE WAM763-1 (US)0 < V3.2.0affected
SiemensSCALANCE WAM766-10 < V3.2.0affected
SiemensSCALANCE WAM766-1 (ME)0 < V3.2.0affected
SiemensSCALANCE WAM766-1 (US)0 < V3.2.0affected
SiemensSCALANCE WAM766-1 EEC0 < V3.2.0affected
SiemensSCALANCE WAM766-1 EEC (ME)0 < V3.2.0affected
SiemensSCALANCE WAM766-1 EEC (US)0 < V3.2.0affected
SiemensSCALANCE WUB762-10 < V3.2.0affected
SiemensSCALANCE WUB762-1 iFeatures0 < V3.2.0affected
SiemensSCALANCE WUM763-10 < V3.2.0affected
SiemensSCALANCE WUM763-10 < V3.2.0affected
SiemensSCALANCE WUM763-1 (US)0 < V3.2.0affected
SiemensSCALANCE WUM763-1 (US)0 < V3.2.0affected
SiemensSCALANCE WUM766-10 < V3.2.0affected
SiemensSCALANCE WUM766-1 (ME)0 < V3.2.0affected
SiemensSCALANCE WUM766-1 (USA)0 < V3.2.0affected
SiemensSCALANCE X204-20 < *affected
SiemensSCALANCE X204-2FM0 < *affected
SiemensSCALANCE X204-2LD0 < *affected
SiemensSCALANCE X204-2LD TS0 < *affected
SiemensSCALANCE X204-2TS0 < *affected
SiemensSCALANCE X206-10 < *affected
SiemensSCALANCE X206-1LD0 < *affected
SiemensSCALANCE X2080 < *affected
SiemensSCALANCE X208PRO0 < *affected
SiemensSCALANCE X212-20 < *affected
SiemensSCALANCE X212-2LD0 < *affected
SiemensSCALANCE X2160 < *affected
SiemensSCALANCE X2240 < *affected
SiemensSCALANCE X302-7 EEC (230V, coated)0 < *affected
SiemensSCALANCE X302-7 EEC (230V)0 < *affected
SiemensSCALANCE X302-7 EEC (24V, coated)0 < *affected
SiemensSCALANCE X302-7 EEC (24V)0 < *affected
SiemensSCALANCE X302-7 EEC (2x 230V, coated)0 < *affected
SiemensSCALANCE X302-7 EEC (2x 230V)0 < *affected
SiemensSCALANCE X302-7 EEC (2x 24V, coated)0 < *affected
SiemensSCALANCE X302-7 EEC (2x 24V)0 < *affected
SiemensSCALANCE X304-2FE0 < *affected
SiemensSCALANCE X306-1LD FE0 < *affected
SiemensSCALANCE X307-2 EEC (230V, coated)0 < *affected
SiemensSCALANCE X307-2 EEC (230V)0 < *affected
SiemensSCALANCE X307-2 EEC (24V, coated)0 < *affected
SiemensSCALANCE X307-2 EEC (24V)0 < *affected
SiemensSCALANCE X307-2 EEC (2x 230V, coated)0 < *affected
SiemensSCALANCE X307-2 EEC (2x 230V)0 < *affected
SiemensSCALANCE X307-2 EEC (2x 24V, coated)0 < *affected
SiemensSCALANCE X307-2 EEC (2x 24V)0 < *affected
SiemensSCALANCE X307-30 < *affected
SiemensSCALANCE X307-30 < *affected
SiemensSCALANCE X307-3LD0 < *affected
SiemensSCALANCE X307-3LD0 < *affected
SiemensSCALANCE X308-20 < *affected
SiemensSCALANCE X308-2 RD (inkl. SIPLUS variants)0 < *affected
SiemensSCALANCE X308-2LD0 < *affected
SiemensSCALANCE X308-2LD0 < *affected
SiemensSCALANCE X308-2LH0 < *affected
SiemensSCALANCE X308-2LH0 < *affected
SiemensSCALANCE X308-2LH+0 < *affected
SiemensSCALANCE X308-2LH+0 < *affected
SiemensSCALANCE X308-2M0 < *affected
SiemensSCALANCE X308-2M0 < *affected
SiemensSCALANCE X308-2M PoE0 < *affected
SiemensSCALANCE X308-2M PoE0 < *affected
SiemensSCALANCE X308-2M TS0 < *affected
SiemensSCALANCE X308-2M TS0 < *affected
SiemensSCALANCE X3100 < *affected
SiemensSCALANCE X3100 < *affected
SiemensSCALANCE X310FE0 < *affected
SiemensSCALANCE X310FE0 < *affected
SiemensSCALANCE X320-1 FE0 < *affected
SiemensSCALANCE X320-1-2LD FE0 < *affected
SiemensSCALANCE X408-20 < *affected
SiemensSCALANCE XF2040 < *affected
SiemensSCALANCE XF204-20 < *affected
SiemensSCALANCE XF206-10 < *affected
SiemensSCALANCE XF2080 < *affected
SiemensSCALANCE XM408-4C0 < *affected
SiemensSCALANCE XM408-4C (L3 int.)0 < *affected
SiemensSCALANCE XM408-8C0 < *affected
SiemensSCALANCE XM408-8C (L3 int.)0 < *affected
SiemensSCALANCE XM416-4C0 < *affected
SiemensSCALANCE XM416-4C (L3 int.)0 < *affected
SiemensSCALANCE XR324-12M (230V, ports on front)0 < *affected
SiemensSCALANCE XR324-12M (230V, ports on front)0 < *affected
SiemensSCALANCE XR324-12M (230V, ports on rear)0 < *affected
SiemensSCALANCE XR324-12M (230V, ports on rear)0 < *affected
SiemensSCALANCE XR324-12M (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-12M (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-12M (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-12M (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-12M TS (24V)0 < *affected
SiemensSCALANCE XR324-12M TS (24V)0 < *affected
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M EEC (2x 24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M PoE (230V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M PoE (230V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M PoE (230V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M PoE (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M PoE (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M PoE (24V, ports on rear)0 < *affected
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)0 < *affected
SiemensSCALANCE XR324-4M PoE TS (24V, ports on front)0 < *affected
SiemensSCALANCE XR524-8C, 1x230V0 < *affected
SiemensSCALANCE XR524-8C, 1x230V (L3 int.)0 < *affected
SiemensSCALANCE XR524-8C, 24V0 < *affected
SiemensSCALANCE XR524-8C, 24V (L3 int.)0 < *affected
SiemensSCALANCE XR524-8C, 2x230V0 < *affected
SiemensSCALANCE XR524-8C, 2x230V (L3 int.)0 < *affected
SiemensSCALANCE XR526-8C, 1x230V0 < *affected
SiemensSCALANCE XR526-8C, 1x230V (L3 int.)0 < *affected
SiemensSCALANCE XR526-8C, 24V0 < *affected
SiemensSCALANCE XR526-8C, 24V (L3 int.)0 < *affected
SiemensSCALANCE XR526-8C, 2x230V0 < *affected
SiemensSCALANCE XR526-8C, 2x230V (L3 int.)0 < *affected
SiemensSCALANCE XR528-6M0 < *affected
SiemensSCALANCE XR528-6M (2HR2, L3 int.)0 < *affected
SiemensSCALANCE XR528-6M (2HR2)0 < *affected
SiemensSCALANCE XR528-6M (L3 int.)0 < *affected
SiemensSCALANCE XR552-12M0 < *affected
SiemensSCALANCE XR552-12M (2HR2, L3 int.)0 < *affected
SiemensSCALANCE XR552-12M (2HR2)0 < *affected
SiemensSCALANCE XR552-12M (2HR2)0 < *affected
SiemensSIMATIC CFU DIQ0 < V2.0.0affected
SiemensSIMATIC CFU PA0 < V2.0.0affected
SiemensSIMATIC CFU PA0 < V2.0.0affected
SiemensSIMATIC ET 200pro IM 154-8 PN/DP CPU0 < *affected
SiemensSIMATIC ET 200pro IM 154-8F PN/DP CPU0 < *affected
SiemensSIMATIC ET 200pro IM 154-8FX PN/DP CPU0 < *affected
SiemensSIMATIC ET 200S IM 151-8 PN/DP CPU0 < *affected
SiemensSIMATIC ET 200S IM 151-8F PN/DP CPU0 < *affected
SiemensSIMATIC ET 200SP CPU 1510SP F-1 PN0 < *affected
SiemensSIMATIC ET 200SP CPU 1510SP-1 PN0 < *affected
SiemensSIMATIC ET 200SP CPU 1512SP F-1 PN0 < *affected
SiemensSIMATIC ET 200SP CPU 1512SP-1 PN0 < *affected
SiemensSIMATIC ET 200SP HA IM155-6 PN0 < V1.3affected
SiemensSIMATIC S7-1500 CPU 1511-1 PN0 < *affected
SiemensSIMATIC S7-1500 CPU 1511F-1 PN0 < *affected
SiemensSIMATIC S7-1500 CPU 1513-1 PN0 < *affected
SiemensSIMATIC S7-1500 CPU 1515-2 PN0 < *affected
SiemensSIMATIC S7-1500 CPU 1515F-2 PN0 < *affected
SiemensSIMATIC S7-1500 CPU 1516-3 PN/DP0 < *affected
SiemensSIMATIC S7-1500 CPU 1516F-3 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 314C-2 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 315-2 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 315F-2 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 315T-3 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 317-2 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 317F-2 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 317T-3 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 317TF-3 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 319-3 PN/DP0 < *affected
SiemensSIMATIC S7-300 CPU 319F-3 PN/DP0 < *affected
SiemensSIMATIC S7-400 CPU 412-2 PN V70 < *affected
SiemensSIMATIC S7-400 CPU 414-3 PN/DP V70 < *affected
SiemensSIMATIC S7-400 CPU 414F-3 PN/DP V70 < *affected
SiemensSIMATIC S7-400 CPU 416-3 PN/DP V70 < *affected
SiemensSIMATIC S7-400 CPU 416F-3 PN/DP V70 < *affected
SiemensSIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)0 < *affected
SiemensSIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)0 < V10.2affected
SiemensSIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)0 < V8.3affected
SiemensSIMIT UNIT V100 < *affected
SiemensSIMIT UNIT V110 < *affected
SiemensSINAMICS CBE200 < *affected
SiemensSINAMICS G115D0 < *affected
SiemensSINAMICS G120 (incl. SIPLUS variants)0 < *affected
SiemensSINAMICS G120C0 < *affected
SiemensSINAMICS G120D0 < *affected
SiemensSINAMICS G120X0 < *affected
SiemensSINAMICS G120XA0 < *affected
SiemensSINAMICS G1300 < *affected
SiemensSINAMICS G1500 < *affected
SiemensSINAMICS S1100 < *affected
SiemensSINAMICS S120 (incl. SIPLUS variants)0 < *affected
SiemensSINAMICS S1500 < *affected
SiemensSINUMERIK 840D sl0 < *affected
SiemensSIPLUS ET 200S IM 151-8 PN/DP CPU0 < *affected
SiemensSIPLUS ET 200S IM 151-8F PN/DP CPU0 < *affected
SiemensSIPLUS NET IE/PB link PN IO0 < *affected
SiemensSIPLUS S7-300 CPU 314C-2 PN/DP0 < *affected
SiemensSIPLUS S7-300 CPU 315-2 PN/DP0 < *affected
SiemensSIPLUS S7-300 CPU 315F-2 PN/DP0 < *affected
SiemensSIPLUS S7-300 CPU 317-2 PN/DP0 < *affected
SiemensSIPLUS S7-300 CPU 317F-2 PN/DP0 < *affected
SiemensSIPLUS S7-400 CPU 414-3 PN/DP V70 < *affected
SiemensSIPLUS S7-400 CPU 416-3 PN/DP V70 < *affected
SiemensSITOP PSU8600 1AC 20 A/4x5 A PN0 < *affected
SiemensSITOP PSU8600 3AC 20 A PN0 < *affected
SiemensSITOP PSU8600 3AC 20 A/4x5 A PN0 < *affected
SiemensSITOP PSU8600 3AC 40 A PN0 < *affected
SiemensSITOP PSU8600 3AC 40 A/4x10 A PN0 < *affected
SiemensSITOP PSU8600 3AC 40 A/4x10A EIP0 < *affected
SiemensSITOP UPS1600 10 A Ethernet/ PROFINET0 < *affected
SiemensSITOP UPS1600 20 A Ethernet/ PROFINET0 < *affected
SiemensSITOP UPS1600 40 A Ethernet/ PROFINET0 < *affected
SiemensSITOP UPS1600 EX 20 A Ethernet PROFINET0 < *affected

Weaknesses

  • CWE-476: CWE-476: NULL Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References