Skip to main content
Threat Radar animated logo
EPSS 0.3%top 75%

CVE-2025-40833: CWE-476: NULL Pointer Dereference in Siemens IE/PB LINK HA

0
High
VulnerabilityCVE-2025-40833cvecve-2025-40833cwe-476
Published: 05/12/2026 (05/12/2026, 08:20:46 UTC)
Source: CVE Database V5
Vendor/Project: Siemens
Product: IE/PB LINK HA

Description

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

CVSS v3.1

Score 7.5high

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Siemens

IE/PB LINK HA

Affected versions
>=0 <4.1.2

Siemens

IE/PB link PN IO

Affected versions
>=0

Siemens

RUGGEDCOM RM1224 LTE(4G) EU

Affected versions
>=0 <8.3

Siemens

RUGGEDCOM RM1224 LTE(4G) NAM

Affected versions
>=0 <8.3

Siemens

SCALANCE M804PB

Affected versions
>=0 <8.3

Siemens

SCALANCE M812-1 ADSL-Router

Affected versions
>=0 <8.3

Siemens

SCALANCE M816-1 ADSL-Router

Affected versions
>=0 <8.3

Siemens

SCALANCE M826-2 SHDSL-Router

Affected versions
>=0 <8.3

Siemens

SCALANCE M874-2

Affected versions
>=0 <8.3

Siemens

SCALANCE M874-3

Affected versions
>=0 <8.3

Siemens

SCALANCE M874-3 3G-Router (CN)

Affected versions
>=0 <8.3

Siemens

SCALANCE M876-3

Affected versions
>=0 <8.3

Siemens

SCALANCE M876-3 (ROK)

Affected versions
>=0 <8.3

Siemens

SCALANCE M876-4

Affected versions
>=0 <8.3

Siemens

SCALANCE M876-4 (EU)

Affected versions
>=0 <8.3

Siemens

SCALANCE M876-4 (NAM)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUB852-1 (A1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUB852-1 (B1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM853-1 (A1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM853-1 (B1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM853-1 (EU)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM856-1 (A1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM856-1 (B1)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM856-1 (CN)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM856-1 (EU)

Affected versions
>=0 <8.3

Siemens

SCALANCE MUM856-1 (RoW)

Affected versions
>=0 <8.3

Siemens

SCALANCE S615 EEC LAN-Router

Affected versions
>=0 <8.3

Siemens

SCALANCE S615 LAN-Router

Affected versions
>=0 <8.3

Siemens

SCALANCE SC622-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE SC626-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE SC632-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE SC636-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE SC642-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE SC646-2C

Affected versions
>=0 <3.2

Siemens

SCALANCE W1748-1 M12

Affected versions
>=0

Siemens

SCALANCE W1788-1 M12

Affected versions
>=0

Siemens

SCALANCE W1788-2 EEC M12

Affected versions
>=0

Siemens

SCALANCE W1788-2 M12

Affected versions
>=0

Siemens

SCALANCE W1788-2IA M12

Affected versions
>=0

Siemens

SCALANCE W721-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W722-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W734-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W734-1 RJ45 (USA)

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W738-1 M12

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W748-1 M12

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W748-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W761-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W774-1 M12 EEC

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W774-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W774-1 RJ45 (USA)

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W778-1 M12

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W778-1 M12 EEC

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W778-1 M12 EEC (USA)

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W786-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W786-2 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W786-2 SFP

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W786-2IA RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W788-1 M12

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W788-1 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W788-2 M12

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W788-2 M12 EEC

Affected versions
>=0 <6.6.0

Siemens

SCALANCE W788-2 RJ45

Affected versions
>=0 <6.6.0

Siemens

SCALANCE WAB762-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM763-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM763-1 (ME)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM763-1 (US)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1 (ME)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1 (US)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1 EEC

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1 EEC (ME)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WAM766-1 EEC (US)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUB762-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUB762-1 iFeatures

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUM763-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUM763-1 (US)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUM766-1

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUM766-1 (ME)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE WUM766-1 (USA)

Affected versions
>=0 <3.2.0

Siemens

SCALANCE X204-2

Affected versions
>=0

Siemens

SCALANCE X204-2FM

Affected versions
>=0

Siemens

SCALANCE X204-2LD

Affected versions
>=0

Siemens

SCALANCE X204-2LD TS

Affected versions
>=0

Siemens

SCALANCE X204-2TS

Affected versions
>=0

Siemens

SCALANCE X206-1

Affected versions
>=0

Siemens

SCALANCE X206-1LD

Affected versions
>=0

Siemens

SCALANCE X208

Affected versions
>=0

Siemens

SCALANCE X208PRO

Affected versions
>=0

Siemens

SCALANCE X212-2

Affected versions
>=0

Siemens

SCALANCE X212-2LD

Affected versions
>=0

Siemens

SCALANCE X216

Affected versions
>=0

Siemens

SCALANCE X224

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (230V, coated)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (230V)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (24V, coated)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (24V)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (2x 230V, coated)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (2x 230V)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (2x 24V, coated)

Affected versions
>=0

Siemens

SCALANCE X302-7 EEC (2x 24V)

Affected versions
>=0

Siemens

SCALANCE X304-2FE

Affected versions
>=0

Siemens

SCALANCE X306-1LD FE

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (230V, coated)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (230V)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (24V, coated)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (24V)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (2x 230V, coated)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (2x 230V)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (2x 24V, coated)

Affected versions
>=0

Siemens

SCALANCE X307-2 EEC (2x 24V)

Affected versions
>=0

Siemens

SCALANCE X307-3

Affected versions
>=0

Siemens

SCALANCE X307-3LD

Affected versions
>=0

Siemens

SCALANCE X308-2

Affected versions
>=0

Siemens

SCALANCE X308-2 RD (inkl. SIPLUS variants)

Affected versions
>=0

Siemens

SCALANCE X308-2LD

Affected versions
>=0

Siemens

SCALANCE X308-2LH

Affected versions
>=0

Siemens

SCALANCE X308-2LH+

Affected versions
>=0

Siemens

SCALANCE X308-2M

Affected versions
>=0

Siemens

SCALANCE X308-2M PoE

Affected versions
>=0

Siemens

SCALANCE X308-2M TS

Affected versions
>=0

Siemens

SCALANCE X310

Affected versions
>=0

Siemens

SCALANCE X310FE

Affected versions
>=0

Siemens

SCALANCE X320-1 FE

Affected versions
>=0

Siemens

SCALANCE X320-1-2LD FE

Affected versions
>=0

Siemens

SCALANCE X408-2

Affected versions
>=0

Siemens

SCALANCE XF204

Affected versions
>=0

Siemens

SCALANCE XF204-2

Affected versions
>=0

Siemens

SCALANCE XF206-1

Affected versions
>=0

Siemens

SCALANCE XF208

Affected versions
>=0

Siemens

SCALANCE XM408-4C

Affected versions
>=0

Siemens

SCALANCE XM408-4C (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XM408-8C

Affected versions
>=0

Siemens

SCALANCE XM408-8C (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XM416-4C

Affected versions
>=0

Siemens

SCALANCE XM416-4C (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR324-12M (230V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-12M (230V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-12M (24V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-12M (24V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-12M TS (24V)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (24V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (24V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (2x 24V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M EEC (2x 24V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M PoE (230V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M PoE (230V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M PoE (24V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR324-4M PoE (24V, ports on rear)

Affected versions
>=0

Siemens

SCALANCE XR324-4M PoE TS (24V, ports on front)

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 1x230V

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 1x230V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 24V

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 24V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 2x230V

Affected versions
>=0

Siemens

SCALANCE XR524-8C, 2x230V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 1x230V

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 1x230V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 24V

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 24V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 2x230V

Affected versions
>=0

Siemens

SCALANCE XR526-8C, 2x230V (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR528-6M

Affected versions
>=0

Siemens

SCALANCE XR528-6M (2HR2, L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR528-6M (2HR2)

Affected versions
>=0

Siemens

SCALANCE XR528-6M (L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR552-12M

Affected versions
>=0

Siemens

SCALANCE XR552-12M (2HR2, L3 int.)

Affected versions
>=0

Siemens

SCALANCE XR552-12M (2HR2)

Affected versions
>=0

Siemens

SIMATIC CFU DIQ

Affected versions
>=0 <2.0.0

Siemens

SIMATIC CFU PA

Affected versions
>=0 <2.0.0

Siemens

SIMATIC ET 200pro IM 154-8 PN/DP CPU

Affected versions
>=0

Siemens

SIMATIC ET 200pro IM 154-8F PN/DP CPU

Affected versions
>=0

Siemens

SIMATIC ET 200pro IM 154-8FX PN/DP CPU

Affected versions
>=0

Siemens

SIMATIC ET 200S IM 151-8 PN/DP CPU

Affected versions
>=0

Siemens

SIMATIC ET 200S IM 151-8F PN/DP CPU

Affected versions
>=0

Siemens

SIMATIC ET 200SP CPU 1510SP F-1 PN

Affected versions
>=0

Siemens

SIMATIC ET 200SP CPU 1510SP-1 PN

Affected versions
>=0

Siemens

SIMATIC ET 200SP CPU 1512SP F-1 PN

Affected versions
>=0

Siemens

SIMATIC ET 200SP CPU 1512SP-1 PN

Affected versions
>=0

Siemens

SIMATIC ET 200SP HA IM155-6 PN

Affected versions
>=0 <1.3

Siemens

SIMATIC S7-1500 CPU 1511-1 PN

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1511F-1 PN

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1513-1 PN

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1515-2 PN

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1515F-2 PN

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1516-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-1500 CPU 1516F-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 314C-2 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 315-2 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 315F-2 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 315T-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 317-2 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 317F-2 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 317T-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 317TF-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 319-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-300 CPU 319F-3 PN/DP

Affected versions
>=0

Siemens

SIMATIC S7-400 CPU 412-2 PN V7

Affected versions
>=0

Siemens

SIMATIC S7-400 CPU 414-3 PN/DP V7

Affected versions
>=0

Siemens

SIMATIC S7-400 CPU 414F-3 PN/DP V7

Affected versions
>=0

Siemens

SIMATIC S7-400 CPU 416-3 PN/DP V7

Affected versions
>=0

Siemens

SIMATIC S7-400 CPU 416F-3 PN/DP V7

Affected versions
>=0

Siemens

SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

Affected versions
>=0

Siemens

SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

Affected versions
>=0 <10.2

Siemens

SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

Affected versions
>=0 <8.3

Siemens

SIMIT UNIT V10

Affected versions
>=0

Siemens

SIMIT UNIT V11

Affected versions
>=0

Siemens

SINAMICS CBE20

Affected versions
>=0

Siemens

SINAMICS G115D

Affected versions
>=0

Siemens

SINAMICS G120 (incl. SIPLUS variants)

Affected versions
>=0

Siemens

SINAMICS G120C

Affected versions
>=0

Siemens

SINAMICS G120D

Affected versions
>=0

Siemens

SINAMICS G120X

Affected versions
>=0

Siemens

SINAMICS G120XA

Affected versions
>=0

Siemens

SINAMICS G130

Affected versions
>=0

Siemens

SINAMICS G150

Affected versions
>=0

Siemens

SINAMICS S110

Affected versions
>=0

Siemens

SINAMICS S120 (incl. SIPLUS variants)

Affected versions
>=0

Siemens

SINAMICS S150

Affected versions
>=0

Siemens

SINUMERIK 840D sl

Affected versions
>=0

Siemens

SIPLUS ET 200S IM 151-8 PN/DP CPU

Affected versions
>=0

Siemens

SIPLUS ET 200S IM 151-8F PN/DP CPU

Affected versions
>=0

Siemens

SIPLUS NET IE/PB link PN IO

Affected versions
>=0

Siemens

SIPLUS S7-300 CPU 314C-2 PN/DP

Affected versions
>=0

Siemens

SIPLUS S7-300 CPU 315-2 PN/DP

Affected versions
>=0

Siemens

SIPLUS S7-300 CPU 315F-2 PN/DP

Affected versions
>=0

Siemens

SIPLUS S7-300 CPU 317-2 PN/DP

Affected versions
>=0

Siemens

SIPLUS S7-300 CPU 317F-2 PN/DP

Affected versions
>=0

Siemens

SIPLUS S7-400 CPU 414-3 PN/DP V7

Affected versions
>=0

Siemens

SIPLUS S7-400 CPU 416-3 PN/DP V7

Affected versions
>=0

Siemens

SITOP PSU8600 1AC 20 A/4x5 A PN

Affected versions
>=0

Siemens

SITOP PSU8600 3AC 20 A PN

Affected versions
>=0

Siemens

SITOP PSU8600 3AC 20 A/4x5 A PN

Affected versions
>=0

Siemens

SITOP PSU8600 3AC 40 A PN

Affected versions
>=0

Siemens

SITOP PSU8600 3AC 40 A/4x10 A PN

Affected versions
>=0

Siemens

SITOP PSU8600 3AC 40 A/4x10A EIP

Affected versions
>=0

Siemens

SITOP UPS1600 10 A Ethernet/ PROFINET

Affected versions
>=0

Siemens

SITOP UPS1600 20 A Ethernet/ PROFINET

Affected versions
>=0

Siemens

SITOP UPS1600 40 A Ethernet/ PROFINET

Affected versions
>=0

Siemens

SITOP UPS1600 EX 20 A Ethernet PROFINET

Affected versions
>=0

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/11/2026, 13:08:17 UTC

Technical Analysis

This vulnerability (CWE-476) affects Siemens IE/PB LINK HA devices by causing a null pointer dereference when processing certain malformed IPv4 packets. The flaw leads to a denial of service condition, disrupting device availability until a manual reboot is performed. The CVSS 3.1 base score is 7.5 (high severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. No vendor advisory or patch information is currently available.

Potential Impact

Successful exploitation results in denial of service, causing the affected device to become unresponsive and requiring manual restart to restore functionality. There is no impact on confidentiality or integrity reported.

Mitigation Recommendations

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the affected device to untrusted networks to reduce risk.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
siemens
Date Reserved
2025-04-16T08:50:26.976Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 6a02f117cbff5d8610c13a4a

Added to database: 05/12/2026, 09:21:27 UTC

Last enriched: 08/11/2026, 13:08:17 UTC

Last updated: 09/14/2026, 10:01:27 UTC

Views: 176

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses