Back to CVE records
High 7.5Published May 12, 2026

CVE-2025-40833The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.

Updated under an hour ago ()

Does this affect you?

It affects Siemens IE/PB LINK HA and 59 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

CVSS
7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE)
CWE-476
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
siemens
NVD analysis
Awaiting Analysis
Record last updated
Aug 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Siemens IE/PB LINK HA
siemens:ie_pb_link_ha (from the name)
before V4.1.2
CNA record
Siemens IE/PB link PN IO
siemens:ie_pb_link_pn_io (from the name)
all versions
CNA record
Siemens RUGGEDCOM RM1224 LTE(4G) EU
siemens:ruggedcom_rm1224_lte_4g_eu (from the name)
before V8.3
CNA record
Siemens RUGGEDCOM RM1224 LTE(4G) NAM
siemens:ruggedcom_rm1224_lte_4g_nam (from the name)
before V8.3
CNA record
Siemens SCALANCE M804PB
siemens:scalance_m804pb (from the name)
before V8.3
CNA record
Siemens SCALANCE M812-1 ADSL-Router
siemens:scalance_m812_1_adsl_router (from the name)
before V8.3
CNA record
Siemens SCALANCE M816-1 ADSL-Router
siemens:scalance_m816_1_adsl_router (from the name)
before V8.3
CNA record
Siemens SCALANCE M826-2 SHDSL-Router
siemens:scalance_m826_2_shdsl_router (from the name)
before V8.3
CNA record
Siemens SCALANCE M874-2
siemens:scalance_m874_2 (from the name)
before V8.3
CNA record
Siemens SCALANCE M874-3
siemens:scalance_m874_3 (from the name)
before V8.3
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.