CVE-2025-40833

HIGH
MEDIUM Priority: 0.03 BB Relevance: 77/100
Published: 2026-05-12 Modified: 2026-11-10 First seen: 2026-11-10 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: X
AT: None
VC: None
VI: None
VA: High

Description

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

Affected Software (305)

VendorProductVersion
Siemens IE/PB LINK HA (6GK1411-5BB00) 0 < *
Siemens IE/PB link PN IO (6GK1411-5AB10) 0 < *
Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) 0 < V8.3
Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) 0 < V8.3
Siemens SCALANCE M804PB (6GK5804-0AP00-2AA2) 0 < V8.3
Siemens SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) 0 < V8.3
Siemens SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) 0 < V8.3
Siemens SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) 0 < V8.3
Siemens SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) 0 < V8.3
Siemens SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) 0 < V8.3
Siemens SCALANCE M874-2 (6GK5874-2AA00-2AA2) 0 < V8.3
Siemens SCALANCE M874-3 (6GK5874-3AA00-2AA2) 0 < V8.3
Siemens SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) 0 < V8.3
Siemens SCALANCE M876-3 (6GK5876-3AA02-2BA2) 0 < V8.3
Siemens SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) 0 < V8.3
Siemens SCALANCE M876-4 (6GK5876-4AA10-2BA2) 0 < V8.3
Siemens SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) 0 < V8.3
Siemens SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) 0 < V8.3
Siemens SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) 0 < V8.3
Siemens SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) 0 < V8.3
Siemens SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) 0 < V8.3
Siemens SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) 0 < V8.3
Siemens SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) 0 < V8.3
Siemens SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) 0 < V8.3
Siemens SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) 0 < V8.3
Siemens SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) 0 < V8.3
Siemens SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) 0 < V8.3
Siemens SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) 0 < V8.3
Siemens SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) 0 < V8.3
Siemens SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) 0 < V8.3
Showing 30 of 305 entries

Bug Bounty Relevance

77 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.7 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.32%
Raw Score 0.003240
Percentile 25.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00324
2026-11-12
0.00324
2026-11-10
0.00324
2026-11-09
0.00324

Intelligence Sources

mitre ref →
nvd ref →