Back to the CVE list
CVE-2025-40833Suited to automated attack · CISA

NULL pointer dereference in Siemens IE/PB LINK HA

CVSS score

7.5

EPSS probability

%0.3

Risk score

0.0

Published

5 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2025-40833 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2025-40833 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1siemensIE/PB LINK HA View
2siemensIE/PB link PN IO View
3siemensRUGGEDCOM RM1224 LTE(4G) EU View
4siemensRUGGEDCOM RM1224 LTE(4G) NAM View
5siemensSCALANCE M804PB View
6siemensSCALANCE M812-1 ADSL-Router View
7siemensSCALANCE M816-1 ADSL-Router View
8siemensSCALANCE M826-2 SHDSL-Router View
9siemensSCALANCE M874-2 View
10siemensSCALANCE M874-3 View
11siemensSCALANCE M874-3 3G-Router (CN) View
12siemensSCALANCE M876-3 View
13siemensSCALANCE M876-3 (ROK) View
14siemensSCALANCE M876-4 View
15siemensSCALANCE M876-4 (EU) View
16siemensSCALANCE M876-4 (NAM) View
17siemensSCALANCE MUB852-1 (A1) View
18siemensSCALANCE MUB852-1 (B1) View
19siemensSCALANCE MUM853-1 (A1) View
20siemensSCALANCE MUM853-1 (B1) View
21siemensSCALANCE MUM853-1 (EU) View
22siemensSCALANCE MUM856-1 (A1) View
23siemensSCALANCE MUM856-1 (B1) View
24siemensSCALANCE MUM856-1 (CN) View
25siemensSCALANCE MUM856-1 (EU) View
26siemensSCALANCE MUM856-1 (RoW) View
27siemensSCALANCE S615 EEC LAN-Router View
28siemensSCALANCE S615 LAN-Router View
29siemensscalance sc622-2c View
30siemensscalance sc626-2c View
31siemensscalance sc632-2c View
32siemensscalance sc636-2c View
33siemensscalance sc642-2c View
34siemensscalance sc646-2c View
35siemensSCALANCE W1748-1 M12 View
36siemensSCALANCE W1788-1 M12 View
37siemensSCALANCE W1788-2 EEC M12 View
38siemensSCALANCE W1788-2 M12 View
39siemensSCALANCE W1788-2IA M12 View
40siemensSCALANCE W721-1 RJ45 View
41siemensSCALANCE W722-1 RJ45 View
42siemensSCALANCE W734-1 RJ45 View
43siemensSCALANCE W734-1 RJ45 (USA) View
44siemensSCALANCE W738-1 M12 View
45siemensSCALANCE W748-1 M12 View
46siemensSCALANCE W748-1 RJ45 View
47siemensSCALANCE W761-1 RJ45 View
48siemensSCALANCE W774-1 M12 EEC View
49siemensSCALANCE W774-1 RJ45 View
50siemensSCALANCE W774-1 RJ45 (USA) View
51siemensSCALANCE W778-1 M12 View
52siemensSCALANCE W778-1 M12 EEC View
53siemensSCALANCE W778-1 M12 EEC (USA) View
54siemensSCALANCE W786-1 RJ45 View
55siemensSCALANCE W786-2 RJ45 View
56siemensSCALANCE W786-2 SFP View
57siemensSCALANCE W786-2IA RJ45 View
58siemensSCALANCE W788-1 M12 View
59siemensSCALANCE W788-1 RJ45 View
60siemensSCALANCE W788-2 M12 View
61siemensSCALANCE W788-2 M12 EEC View
62siemensSCALANCE W788-2 RJ45 View
63siemensSCALANCE WAB762-1 View
64siemensSCALANCE WAM763-1 View
65siemensSCALANCE WAM763-1 (ME) View
66siemensSCALANCE WAM763-1 (US) View
67siemensSCALANCE WAM766-1 View
68siemensSCALANCE WAM766-1 (ME) View
69siemensSCALANCE WAM766-1 (US) View
70siemensSCALANCE WAM766-1 EEC View
71siemensSCALANCE WAM766-1 EEC (ME) View
72siemensSCALANCE WAM766-1 EEC (US) View
73siemensSCALANCE WUB762-1 View
74siemensSCALANCE WUB762-1 iFeatures View
75siemensSCALANCE WUM763-1 View
76siemensSCALANCE WUM763-1 (US) View
77siemensSCALANCE WUM766-1 View
78siemensSCALANCE WUM766-1 (ME) View
79siemensSCALANCE WUM766-1 (USA) View
80siemensSCALANCE X204-2 View
81siemensSCALANCE X204-2FM View
82siemensSCALANCE X204-2LD View
83siemensSCALANCE X204-2LD TS View
84siemensSCALANCE X204-2TS View
85siemensSCALANCE X206-1 View
86siemensSCALANCE X206-1LD View
87siemensSCALANCE X208 View
88siemensSCALANCE X208PRO View
89siemensSCALANCE X212-2 View
90siemensSCALANCE X212-2LD View
91siemensSCALANCE X216 View
92siemensSCALANCE X224 View
93siemensSCALANCE X302-7 EEC (230V, coated) View
94siemensSCALANCE X302-7 EEC (230V) View
95siemensSCALANCE X302-7 EEC (24V, coated) View
96siemensSCALANCE X302-7 EEC (24V) View
97siemensSCALANCE X302-7 EEC (2x 230V, coated) View
98siemensSCALANCE X302-7 EEC (2x 230V) View
99siemensSCALANCE X302-7 EEC (2x 24V, coated) View
100siemensSCALANCE X302-7 EEC (2x 24V) View
101siemensSCALANCE X304-2FE View
102siemensSCALANCE X306-1LD FE View
103siemensSCALANCE X307-2 EEC (230V, coated) View
104siemensSCALANCE X307-2 EEC (230V) View
105siemensSCALANCE X307-2 EEC (24V, coated) View
106siemensSCALANCE X307-2 EEC (24V) View
107siemensSCALANCE X307-2 EEC (2x 230V, coated) View
108siemensSCALANCE X307-2 EEC (2x 230V) View
109siemensSCALANCE X307-2 EEC (2x 24V, coated) View
110siemensSCALANCE X307-2 EEC (2x 24V) View
111siemensSCALANCE X307-3 View
112siemensSCALANCE X307-3LD View
113siemensSCALANCE X308-2 View
114siemensSCALANCE X308-2 RD (inkl. SIPLUS variants) View
115siemensSCALANCE X308-2LD View
116siemensSCALANCE X308-2LH View
117siemensSCALANCE X308-2M View
118siemensSCALANCE X308-2M PoE View
119siemensSCALANCE X308-2M TS View
120siemensSCALANCE X310 View
121siemensSCALANCE X310FE View
122siemensSCALANCE X320-1 FE View
123siemensSCALANCE X320-1-2LD FE View
124siemensSCALANCE X408-2 View
125siemensSCALANCE XF204 View
126siemensSCALANCE XF204-2 View
127siemensSCALANCE XF206-1 View
128siemensSCALANCE XF208 View
129siemensSCALANCE XM408-4C View
130siemensSCALANCE XM408-4C (L3 int.) View
131siemensSCALANCE XM408-8C View
132siemensSCALANCE XM408-8C (L3 int.) View
133siemensSCALANCE XM416-4C View
134siemensSCALANCE XM416-4C (L3 int.) View
135siemensSCALANCE XR324-12M (230V, ports on front) View
136siemensSCALANCE XR324-12M (230V, ports on rear) View
137siemensSCALANCE XR324-12M (24V, ports on front) View
138siemensSCALANCE XR324-12M (24V, ports on rear) View
139siemensSCALANCE XR324-12M TS (24V) View
140siemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) View
141siemensSCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) View
142siemensSCALANCE XR324-4M EEC (24V, ports on front) View
143siemensSCALANCE XR324-4M EEC (24V, ports on rear) View
144siemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) View
145siemensSCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) View
146siemensSCALANCE XR324-4M EEC (2x 24V, ports on front) View
147siemensSCALANCE XR324-4M EEC (2x 24V, ports on rear) View
148siemensSCALANCE XR324-4M PoE (230V, ports on front) View
149siemensSCALANCE XR324-4M PoE (230V, ports on rear) View
150siemensSCALANCE XR324-4M PoE (24V, ports on front) View
151siemensSCALANCE XR324-4M PoE (24V, ports on rear) View
152siemensSCALANCE XR324-4M PoE TS (24V, ports on front) View
153siemensSCALANCE XR524-8C, 1x230V View
154siemensSCALANCE XR524-8C, 1x230V (L3 int.) View
155siemensSCALANCE XR524-8C, 24V View
156siemensSCALANCE XR524-8C, 24V (L3 int.) View
157siemensSCALANCE XR524-8C, 2x230V View
158siemensSCALANCE XR524-8C, 2x230V (L3 int.) View
159siemensSCALANCE XR526-8C, 1x230V View
160siemensSCALANCE XR526-8C, 1x230V (L3 int.) View
161siemensSCALANCE XR526-8C, 24V View
162siemensSCALANCE XR526-8C, 24V (L3 int.) View
163siemensSCALANCE XR526-8C, 2x230V View
164siemensSCALANCE XR526-8C, 2x230V (L3 int.) View
165siemensSCALANCE XR528-6M View
166siemensSCALANCE XR528-6M (2HR2, L3 int.) View
167siemensSCALANCE XR528-6M (2HR2) View
168siemensSCALANCE XR528-6M (L3 int.) View
169siemensSCALANCE XR552-12M View
170siemensSCALANCE XR552-12M (2HR2, L3 int.) View
171siemensSCALANCE XR552-12M (2HR2) View
172siemensSIMATIC CFU DIQ View
173siemensSIMATIC CFU PA View
174siemensSIMATIC ET 200pro IM 154-8 PN/DP CPU View
175siemensSIMATIC ET 200pro IM 154-8F PN/DP CPU View
176siemensSIMATIC ET 200pro IM 154-8FX PN/DP CPU View
177siemensSIMATIC ET 200S IM 151-8 PN/DP CPU View
178siemensSIMATIC ET 200S IM 151-8F PN/DP CPU View
179siemensSIMATIC ET 200SP CPU 1510SP F-1 PN View
180siemensSIMATIC ET 200SP CPU 1510SP-1 PN View
181siemensSIMATIC ET 200SP CPU 1512SP F-1 PN View
182siemensSIMATIC ET 200SP CPU 1512SP-1 PN View
183siemensSIMATIC ET 200SP HA IM155-6 PN View
184siemensSIMATIC S7-1500 CPU 1511-1 PN View
185siemensSIMATIC S7-1500 CPU 1511F-1 PN View
186siemensSIMATIC S7-1500 CPU 1513-1 PN View
187siemensSIMATIC S7-1500 CPU 1515-2 PN View
188siemensSIMATIC S7-1500 CPU 1515F-2 PN View
189siemensSIMATIC S7-1500 CPU 1516-3 PN/DP View
190siemensSIMATIC S7-1500 CPU 1516F-3 PN/DP View
191siemensSIMATIC S7-300 CPU 314C-2 PN/DP View
192siemensSIMATIC S7-300 CPU 315-2 PN/DP View
193siemensSIMATIC S7-300 CPU 315F-2 PN/DP View
194siemensSIMATIC S7-300 CPU 315T-3 PN/DP View
195siemensSIMATIC S7-300 CPU 317-2 PN/DP View
196siemensSIMATIC S7-300 CPU 317F-2 PN/DP View
197siemensSIMATIC S7-300 CPU 317T-3 PN/DP View
198siemensSIMATIC S7-300 CPU 317TF-3 PN/DP View
199siemensSIMATIC S7-300 CPU 319-3 PN/DP View
200siemensSIMATIC S7-300 CPU 319F-3 PN/DP View
Total affected vendors: 1|Products: 200

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.7CVSS V40HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD
8.7CVSS V4_0HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NCVE CNA
7.5CVSS V31HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD
7.5CVSS V3_1HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-40833 is associated with the following CWEs:

CWE-476: NULL Pointer Dereference

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-40833 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://cert-portal.siemens.com/productcert/html/ssa-392349.htmlvendor-advisory

CVSS Vector Radar Chart

7.5 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

S
siemens logo
siemens

Weakness Type (CWE & CAPEC)

CWE-476

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-40833"