7.5
High
CVE-2025-40833 The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests
Description
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IE/PB LINK HA 4.1 | earliest → < 4.1.2 | 4.1.2 |
| IE/PB link PN IO | Versions not published | |
| RUGGEDCOM RM1224 LTE(4G) EU 8.3 | earliest → < 8.3 | 8.3 |
| RUGGEDCOM RM1224 LTE(4G) NAM 8.3 | earliest → < 8.3 | 8.3 |
| SCALANCE M804PB 8.3 | earliest → < 8.3 | 8.3 |
| SCALANCE M812-1 ADSL-Router 8.3 | earliest → < 8.3 | 8.3 |
| SCALANCE M816-1 ADSL-Router 8.3 | earliest → < 8.3 | 8.3 |
| SCALANCE M826-2 SHDSL-Router 8.3 | earliest → < 8.3 | 8.3 |
| SCALANCE M874-2 8.3 | earliest → < 8.3 | 8.3 |
Show the 235 other branches Hide the 235 other branches
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified