CVE-2025-40833
HIGHCVSS 7.5/10EPSS 0.32%
Last modified
CVE-2025-40833 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Siemens | IE/PB LINK HA (6GK1411-5BB00) | < * |
| Siemens | IE/PB link PN IO (6GK1411-5AB10) | < * |
| Siemens | RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) | < V8.3 |
| Siemens | RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) | < V8.3 |
| Siemens | SCALANCE M804PB (6GK5804-0AP00-2AA2) | < V8.3 |
| Siemens | SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) | < V8.3 |
| Siemens | SCALANCE M874-2 (6GK5874-2AA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M874-3 (6GK5874-3AA00-2AA2) | < V8.3 |
| Siemens | SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) | < V8.3 |
| Siemens | SCALANCE M876-3 (6GK5876-3AA02-2BA2) | < V8.3 |
| Siemens | SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) | < V8.3 |
| Siemens | SCALANCE M876-4 (6GK5876-4AA10-2BA2) | < V8.3 |
| Siemens | SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) | < V8.3 |
| Siemens | SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) | < V8.3 |
| Siemens | SCALANCE MUB852-1 (A1) (6GK5852-1EA10-1AA1) | < V8.3 |
| Siemens | SCALANCE MUB852-1 (B1) (6GK5852-1EA10-1BA1) | < V8.3 |
| Siemens | SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) | < V8.3 |
| Siemens | SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) | < V8.3 |
| Siemens | SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) | < V8.3 |
| Siemens | SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) | < V8.3 |
| Siemens | SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) | < V8.3 |
| Siemens | SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) | < V8.3 |
| Siemens | SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) | < V8.3 |
| Siemens | SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) | < V8.3 |
| Siemens | SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) | < V8.3 |
| Siemens | SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) | < V8.3 |
| Siemens | SCALANCE SC622-2C (6GK5622-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE SC626-2C (6GK5626-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE SC632-2C (6GK5632-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE SC636-2C (6GK5636-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE SC642-2C (6GK5642-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE SC646-2C (6GK5646-2GS00-2AC2) | < V3.2 |
| Siemens | SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) | < * |
| Siemens | SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) | < * |
| Siemens | SCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0) | < * |
| Siemens | SCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0) | < * |
| Siemens | SCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0) | < * |
| Siemens | SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) | < * |
| Siemens | SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AA0) | < V6.6.0 |
| Siemens | SCALANCE W721-1 RJ45 (6GK5721-1FC00-0AB0) | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AA0) | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AB0) | < V6.6.0 |
| Siemens | SCALANCE W722-1 RJ45 (6GK5722-1FC00-0AC0) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA0) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AA6) | < V6.6.0 |
| Siemens | SCALANCE W734-1 RJ45 (6GK5734-1FX00-0AB0) | < V6.6.0 |
Showing 50 of 305 affected configurations. See the CNA advisory for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2025-40833?
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.
How severe is CVE-2025-40833?
CVE-2025-40833 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.32% probability of exploitation in the next 30 days.
How do I fix CVE-2025-40833?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-40820Affected products do not properly enforce TCP sequence numbe…7.5
- CVE-2025-40827A vulnerability has been identified in Siemens Software Cent…7.8
- CVE-2025-40829A vulnerability has been identified in Simcenter Femap (All …7.8
- CVE-2025-4083A process isolation vulnerability in Thunderbird stemmed fro…9.1
- CVE-2025-40830A vulnerability has been identified in SINEC Security Monito…6.7
- CVE-2025-40831A vulnerability has been identified in SINEC Security Monito…6.5
- CVE-2025-40834A vulnerability has been identified in Mendix RichText (All …5.7
- CVE-2025-40836Ericsson Indoor Connect 8855 contains an improper input vali…9.8
- CVE-2025-40837Ericsson Indoor Connect 8855 contains a missing authorizatio…8.8
- CVE-2025-40838Ericsson Indoor Connect 8855 contains a vulnerability where …7.5
- CVE-2025-4084Due to insufficient escaping of the special characters in th…5.7
- CVE-2025-40841Ericsson Indoor Connect 8855 versions prior to 2025.Q3 conta…4.3
Are you affected by CVE-2025-40833?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST