BDU:2026-09609

Опубликовано: 12 мая 2026

Источник: fstec

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Уязвимость сетевого программного обеспечения Siemens связана с разыменованием указателей. Эксплуатация уязвимости может позвлоить нарушителю вызвать отказ в обслуживании

Вендор

Siemens AG

Наименование ПО

SINUMERIK 840D sl

SINAMICS S110

SINAMICS G150

SINAMICS S150

SCALANCE X408-2

SCALANCE X304-2FE

SCALANCE X302-7 EEC

SINAMICS G130

SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants)

SCALANCE SC622-2C

SCALANCE SC632-2C

SCALANCE SC636-2C

SCALANCE SC642-2C

SCALANCE SC646-2C

SCALANCE W1748-1 M12

SCALANCE W1788-1 M12

SCALANCE W1788-2 EEC M12

SCALANCE W1788-2 M12

SCALANCE W1788-2IA M12

SCALANCE XF204

SCALANCE XM408-4C

SCALANCE XM408-8C

SCALANCE XM416-4C

SCALANCE XR524-8C

SCALANCE XR526-8C

SCALANCE XR528-6M

SCALANCE XR552-12M

SIMATIC S7-1500 CPU 1511-1 PN

SIMATIC S7-1500 CPU 1511F-1 PN

SIMATIC S7-1500 CPU 1513-1 PN

SIMATIC S7-1500 CPU 1513F-1 PN

SIMATIC S7-1500 CPU 1515-2 PN

SIMATIC S7-1500 CPU 1515F-2 PN

SIMATIC S7-1500 CPU 1516-3 PN/DP

SIMATIC S7-1500 CPU 1516F-3 PN/DP

SIMATIC CFU DIQ

SIMATIC CFU PA

IE/PB LINK HA

IE/PB link PN IO

SIPLUS NET IE/PB link PN IO

RUGGEDCOM RM1224 LTE(4G) EU

RUGGEDCOM RM1224 LTE(4G) NAM

SCALANCE M804PB

SCALANCE M812-1 ADSL-Router

SCALANCE M816-1 ADSL-Router

SCALANCE M826-2 SHDSL-Router

SCALANCE M874-2

SCALANCE M874-3 3G-Router

SCALANCE M874-3

SCALANCE M876-3

SCALANCE M876-3 (ROK)

SCALANCE M876-4

SCALANCE M876-4 (EU)

SCALANCE M876-4 (NAM)

SCALANCE MUB852-1 (A1)

SCALANCE MUB852-1 (B1)

SCALANCE MUM853-1 (A1)

SCALANCE MUM853-1 (B1)

SCALANCE MUM853-1 (EU)

SCALANCE MUM856-1 (A1)

SCALANCE MUM856-1 (B1)

SCALANCE MUM856-1 (CN)

SCALANCE MUM856-1 (EU)

SCALANCE MUM856-1 (RoW)

SCALANCE S615 EEC LAN-Router

SCALANCE S615 LAN-Router

SCALANCE SC626-2C

SCALANCE WAB762-1

SCALANCE WAM763-1

SCALANCE WAM763-1 (ME)

SCALANCE WAM763-1 (US)

SCALANCE WAM766-1

SCALANCE WAM766-1 (ME)

SCALANCE WAM766-1 (US)

SCALANCE WAM766-1 EEC

SCALANCE WAM766-1 EEC (ME)

SCALANCE WAM766-1 EEC (US)

SCALANCE WUB762-1

SCALANCE WUB762-1 iFeatures

SCALANCE WUM763-1

SCALANCE WUM763-1 (US)

SCALANCE WUM766-1

SCALANCE WUM766-1 (ME)

SCALANCE WUM766-1 (USA)

SCALANCE W721-1 RJ45

SCALANCE W722-1 RJ45

SCALANCE W734-1 RJ45

SCALANCE W738-1 M12

SCALANCE W748-1 M12

SCALANCE W748-1 RJ45

SCALANCE W761-1 RJ45

SCALANCE W774-1 M12 EEC

SCALANCE W774-1 RJ45

SCALANCE W778-1 M12

SCALANCE W778-1 M12 EEC

SCALANCE W778-1 M12 EEC (USA)

SCALANCE W786-1 RJ45

SCALANCE W786-2 RJ45

SCALANCE W786-2 SFP

SCALANCE W786-2IA RJ45

SCALANCE W788-1 M12

SCALANCE W788-1 RJ45

SCALANCE W788-2 M12

SCALANCE W788-2 M12 EEC

SCALANCE W788-2 RJ45

SCALANCE X204-2 (incl. SIPLUS NET variant)

SCALANCE X204-2FM

SCALANCE X204-2LD (incl. SIPLUS NET variant)

SCALANCE X204-2TS

SCALANCE X206-1

SCALANCE X206-1LD

SCALANCE X208 (incl. SIPLUS NET variant)

SCALANCE X208PRO

SCALANCE X212-2 (incl. SIPLUS NET variant)

SCALANCE X212-2LD

SCALANCE X216

SCALANCE X224

SCALANCE XF204-2 (incl. SIPLUS NET variant)

SCALANCE X307-3

SCALANCE X307-3LD

SCALANCE X308-2

SCALANCE X308-2LD

SCALANCE X308-2LH

SCALANCE X308-2LH+

SCALANCE X310

SCALANCE X310FE

SCALANCE X308-2M

SCALANCE X308-2M PoE

SCALANCE X308-2M TS

SCALANCE X307-2 EEC

SCALANCE X306-1LD FE

SCALANCE X320-1 FE

SCALANCE X320-1-2LD FE

SCALANCE X308-2 RD (inkl. SIPLUS variants)

SCALANCE XR324-12M

SCALANCE XR324-12M TS

SCALANCE XR324-4M EEC

SCALANCE XR324-4M PoE

SCALANCE XR324-4M PoE TS

SIMATIC ET 200SP HA IM155-6 PN

SIMATIC ET 200pro IM 154-8 PN/DP CPU

SIMATIC ET 200pro IM 154-8F PN/DP CPU

SIMATIC ET 200pro IM 154-8FX PN/DP CPU

SIMATIC ET 200S IM 151-8 PN/DP CPU

SIMATIC ET 200S IM 151-8F PN/DP CPU

SIMATIC S7-300 CPU 314C-2 PN/DP

SIMATIC S7-300 CPU 315-2 PN/DP

SIMATIC S7-300 CPU 315F-2 PN/DP

SIMATIC S7-300 CPU 315T-3 PN/DP

SIMATIC S7-300 CPU 317-2 PN/DP

SIMATIC S7-300 CPU 317F-2 PN/DP

SIMATIC S7-300 CPU 317T-3 PN/DP

SIMATIC S7-300 CPU 317TF-3

SIMATIC S7-300 CPU 319-3 PN/DP

SIMATIC S7-300 CPU 319F-3 PN/DP

SIPLUS ET 200S IM 151-8 PN/DP CPU

SIPLUS ET 200S IM 151-8F PN/DP CPU

SIPLUS S7-300 CPU 314C-2 PN/DP

SIPLUS S7-300 CPU 315-2 PN/DP

SIPLUS S7-300 CPU 315F-2 PN/DP

SIPLUS S7-300 CPU 317-2 PN/DP

SIPLUS S7-300 CPU 317F-2 PN/DP

SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants)

SIMATIC S7-400 CPU 412-2 PN V7

SIMATIC S7-400 CPU 414-3 PN/DP V7

SIMATIC S7-400 CPU 414F-3 PN/DP V7

SIMATIC S7-400 CPU 416-3 PN/DP V7

SIMATIC S7-400 CPU 416F-3 PN/DP V7

SIPLUS S7-400 CPU 414-3 PN/DP V7

SIPLUS S7-400 CPU 416-3 PN/DP V7

SIMATIC ET 200SP CPU 1510SP F-1 PN

SIMATIC ET 200SP CPU 1510SP-1 PN

SIMATIC ET 200SP CPU 1512SP F-1 PN

SIMATIC ET 200SP CPU 1512SP-1 PN

SIMIT UNIT V10

SIMIT UNIT V11

SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants)

SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants)

SINAMICS G115D

SINAMICS G120 (incl. SIPLUS variants)

SINAMICS G120C

SINAMICS G120D

SINAMICS G120X

SINAMICS G120XA

SINAMICS S120 (incl. SIPLUS variants)

SITOP PSU8600 1AC 20 A/4x5 A PN

SITOP PSU8600 3AC 20 A PN

SITOP PSU8600 3AC 20 A/4x5 A PN

SITOP PSU8600 3AC 40 A PN

SITOP PSU8600 3AC 40 A/4x10 A PN

SITOP PSU8600 3AC 40 A/4x10A EIP

SITOP UPS1600 10 A Ethernet/ PROFINET

SITOP UPS1600 20 A Ethernet/ PROFINET

SITOP UPS1600 40 A Ethernet/ PROFINET

SITOP UPS1600 EX 20 A Ethernet PROFINET

SINAMICS CBE20

Версия ПО

- (SINUMERIK 840D sl)

- (SINAMICS S110)

- (SINAMICS G150)

- (SINAMICS S150)

- (SCALANCE X408-2)

- (SCALANCE X304-2FE)

- (SCALANCE X302-7 EEC)

- (SINAMICS G130)

- (SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants))

- (SCALANCE SC622-2C)

- (SCALANCE SC632-2C)

- (SCALANCE SC636-2C)

- (SCALANCE SC642-2C)

- (SCALANCE SC646-2C)

- (SCALANCE W1748-1 M12)

- (SCALANCE W1788-1 M12)

- (SCALANCE W1788-2 EEC M12)

- (SCALANCE W1788-2 M12)

- (SCALANCE W1788-2IA M12)

- (SCALANCE XF204)

- (SCALANCE XM408-4C)

- (SCALANCE XM408-8C)

- (SCALANCE XM416-4C)

- (SCALANCE XR524-8C)

- (SCALANCE XR526-8C)

- (SCALANCE XR528-6M)

- (SCALANCE XR552-12M)

- (SIMATIC S7-1500 CPU 1511-1 PN)

- (SIMATIC S7-1500 CPU 1511F-1 PN)

- (SIMATIC S7-1500 CPU 1513-1 PN)

- (SIMATIC S7-1500 CPU 1513F-1 PN)

- (SIMATIC S7-1500 CPU 1515-2 PN)

- (SIMATIC S7-1500 CPU 1515F-2 PN)

- (SIMATIC S7-1500 CPU 1516-3 PN/DP)

- (SIMATIC S7-1500 CPU 1516F-3 PN/DP)

до 2.0.0 (SIMATIC CFU DIQ)

до 2.0.0 (SIMATIC CFU PA)

- (IE/PB LINK HA)

- (IE/PB link PN IO)

- (SIPLUS NET IE/PB link PN IO)

до 8.3 (RUGGEDCOM RM1224 LTE(4G) EU)

до 8.3 (RUGGEDCOM RM1224 LTE(4G) NAM)

до 8.3 (SCALANCE M804PB)

до 8.3 (SCALANCE M812-1 ADSL-Router)

до 8.3 (SCALANCE M816-1 ADSL-Router)

до 8.3 (SCALANCE M826-2 SHDSL-Router)

до 8.3 (SCALANCE M874-2)

до 8.3 (SCALANCE M874-3 3G-Router)

до 8.3 (SCALANCE M874-3)

до 8.3 (SCALANCE M876-3)

до 8.3 (SCALANCE M876-3 (ROK))

до 8.3 (SCALANCE M876-4)

до 8.3 (SCALANCE M876-4 (EU))

до 8.3 (SCALANCE M876-4 (NAM))

до 8.3 (SCALANCE MUB852-1 (A1))

до 8.3 (SCALANCE MUB852-1 (B1))

до 8.3 (SCALANCE MUM853-1 (A1))

до 8.3 (SCALANCE MUM853-1 (B1))

до 8.3 (SCALANCE MUM853-1 (EU))

до 8.3 (SCALANCE MUM856-1 (A1))

до 8.3 (SCALANCE MUM856-1 (B1))

до 8.3 (SCALANCE MUM856-1 (CN))

до 8.3 (SCALANCE MUM856-1 (EU))

до 8.3 (SCALANCE MUM856-1 (RoW))

до 8.3 (SCALANCE S615 EEC LAN-Router)

до 8.3 (SCALANCE S615 LAN-Router)

- (SCALANCE SC626-2C)

до 3.2.0 (SCALANCE WAB762-1)

до 3.2.0 (SCALANCE WAM763-1)

до 3.2.0 (SCALANCE WAM763-1 (ME))

до 3.2.0 (SCALANCE WAM763-1 (US))

до 3.2.0 (SCALANCE WAM766-1)

до 3.2.0 (SCALANCE WAM766-1 (ME))

до 3.2.0 (SCALANCE WAM766-1 (US))

до 3.2.0 (SCALANCE WAM766-1 EEC)

до 3.2.0 (SCALANCE WAM766-1 EEC (ME))

до 3.2.0 (SCALANCE WAM766-1 EEC (US))

до 3.2.0 (SCALANCE WUB762-1)

до 3.2.0 (SCALANCE WUB762-1 iFeatures)

до 3.2.0 (SCALANCE WUM763-1)

до 3.2.0 (SCALANCE WUM763-1 (US))

до 3.2.0 (SCALANCE WUM766-1)

до 3.2.0 (SCALANCE WUM766-1 (ME))

до 3.2.0 (SCALANCE WUM766-1 (USA))

до 6.6.0 (SCALANCE W721-1 RJ45)

до 6.6.0 (SCALANCE W722-1 RJ45)

до 6.6.0 (SCALANCE W734-1 RJ45)

до 6.6.0 (SCALANCE W738-1 M12)

до 6.6.0 (SCALANCE W748-1 M12)

до 6.6.0 (SCALANCE W748-1 RJ45)

до 6.6.0 (SCALANCE W761-1 RJ45)

до 6.6.0 (SCALANCE W774-1 M12 EEC)

до 6.6.0 (SCALANCE W774-1 RJ45)

до 6.6.0 (SCALANCE W778-1 M12)

до 6.6.0 (SCALANCE W778-1 M12 EEC)

до 6.6.0 (SCALANCE W778-1 M12 EEC (USA))

до 6.6.0 (SCALANCE W786-1 RJ45)

до 6.6.0 (SCALANCE W786-2 RJ45)

до 6.6.0 (SCALANCE W786-2 SFP)

до 6.6.0 (SCALANCE W786-2IA RJ45)

до 6.6.0 (SCALANCE W788-1 M12)

до 6.6.0 (SCALANCE W788-1 RJ45)

до 6.6.0 (SCALANCE W788-2 M12)

до 6.6.0 (SCALANCE W788-2 M12 EEC)

до 6.6.0 (SCALANCE W788-2 RJ45)

- (SCALANCE X204-2 (incl. SIPLUS NET variant))

- (SCALANCE X204-2FM)

- (SCALANCE X204-2LD (incl. SIPLUS NET variant))

- (SCALANCE X204-2TS)

- (SCALANCE X206-1)

- (SCALANCE X206-1LD)

- (SCALANCE X208 (incl. SIPLUS NET variant))

- (SCALANCE X208PRO)

- (SCALANCE X212-2 (incl. SIPLUS NET variant))

- (SCALANCE X212-2LD)

- (SCALANCE X216)

- (SCALANCE X224)

- (SCALANCE XF204-2 (incl. SIPLUS NET variant))

- (SCALANCE X307-3)

- (SCALANCE X307-3LD)

- (SCALANCE X308-2)

- (SCALANCE X308-2LD)

- (SCALANCE X308-2LH)

- (SCALANCE X308-2LH+)

- (SCALANCE X310)

- (SCALANCE X310FE)

- (SCALANCE X308-2M)

- (SCALANCE X308-2M PoE)

- (SCALANCE X308-2M TS)

- (SCALANCE X307-2 EEC)

- (SCALANCE X306-1LD FE)

- (SCALANCE X320-1 FE)

- (SCALANCE X320-1-2LD FE)

- (SCALANCE X308-2 RD (inkl. SIPLUS variants))

- (SCALANCE XR324-12M)

- (SCALANCE XR324-12M TS)

- (SCALANCE XR324-4M EEC)

- (SCALANCE XR324-4M PoE)

- (SCALANCE XR324-4M PoE TS)

до 1.3 (SIMATIC ET 200SP HA IM155-6 PN)

- (SIMATIC ET 200pro IM 154-8 PN/DP CPU)

- (SIMATIC ET 200pro IM 154-8F PN/DP CPU)

- (SIMATIC ET 200pro IM 154-8FX PN/DP CPU)

- (SIMATIC ET 200S IM 151-8 PN/DP CPU)

- (SIMATIC ET 200S IM 151-8F PN/DP CPU)

- (SIMATIC S7-300 CPU 314C-2 PN/DP)

- (SIMATIC S7-300 CPU 315-2 PN/DP)

- (SIMATIC S7-300 CPU 315F-2 PN/DP)

- (SIMATIC S7-300 CPU 315T-3 PN/DP)

- (SIMATIC S7-300 CPU 317-2 PN/DP)

- (SIMATIC S7-300 CPU 317F-2 PN/DP)

- (SIMATIC S7-300 CPU 317T-3 PN/DP)

- (SIMATIC S7-300 CPU 317TF-3)

- (SIMATIC S7-300 CPU 319-3 PN/DP)

- (SIMATIC S7-300 CPU 319F-3 PN/DP)

- (SIPLUS ET 200S IM 151-8 PN/DP CPU)

- (SIPLUS ET 200S IM 151-8F PN/DP CPU)

- (SIPLUS S7-300 CPU 314C-2 PN/DP)

- (SIPLUS S7-300 CPU 315-2 PN/DP)

- (SIPLUS S7-300 CPU 315F-2 PN/DP)

- (SIPLUS S7-300 CPU 317-2 PN/DP)

- (SIPLUS S7-300 CPU 317F-2 PN/DP)

- (SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants))

- (SIMATIC S7-400 CPU 412-2 PN V7)

- (SIMATIC S7-400 CPU 414-3 PN/DP V7)

- (SIMATIC S7-400 CPU 414F-3 PN/DP V7)

- (SIMATIC S7-400 CPU 416-3 PN/DP V7)

- (SIMATIC S7-400 CPU 416F-3 PN/DP V7)

- (SIPLUS S7-400 CPU 414-3 PN/DP V7)

- (SIPLUS S7-400 CPU 416-3 PN/DP V7)

- (SIMATIC ET 200SP CPU 1510SP F-1 PN)

- (SIMATIC ET 200SP CPU 1510SP-1 PN)

- (SIMATIC ET 200SP CPU 1512SP F-1 PN)

- (SIMATIC ET 200SP CPU 1512SP-1 PN)

- (SIMIT UNIT V10)

- (SIMIT UNIT V11)

до 8.3 (SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants))

до 10.2 (SIMATIC S7-410 V10 CPU family (incl. SIPLUS variants))

- (SINAMICS G115D)

- (SINAMICS G120 (incl. SIPLUS variants))

- (SINAMICS G120C)

- (SINAMICS G120D)

- (SINAMICS G120X)

- (SINAMICS G120XA)

- (SINAMICS S120 (incl. SIPLUS variants))

- (SITOP PSU8600 1AC 20 A/4x5 A PN)

- (SITOP PSU8600 3AC 20 A PN)

- (SITOP PSU8600 3AC 20 A/4x5 A PN)

- (SITOP PSU8600 3AC 40 A PN)

- (SITOP PSU8600 3AC 40 A/4x10 A PN)

- (SITOP PSU8600 3AC 40 A/4x10A EIP)

- (SITOP UPS1600 10 A Ethernet/ PROFINET)

- (SITOP UPS1600 20 A Ethernet/ PROFINET)

- (SITOP UPS1600 40 A Ethernet/ PROFINET)

- (SITOP UPS1600 EX 20 A Ethernet PROFINET)

- (SINAMICS CBE20)

Тип ПО

ПО программно-аппаратного средства АСУ ТП

Программное средство АСУ ТП

Средство АСУ ТП

ПО сетевого программно-аппаратного средства

Прикладное ПО информационных систем

ПО программно-аппаратного средства

Сетевое средство

Средство защиты

Сетевое программное средство

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 7,5)

Высокий уровень опасности (оценка CVSS 4.0 составляет 8,7)

Возможные меры по устранению уязвимости

Использование рекомендаций производителя:

https://cert-portal.siemens.com/productcert/html/ssa-392349.html

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://cert-portal.siemens.com/productcert/html/ssa-392349.html

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVE-2025-40833

CVSS3: 7.5

nvd

3 месяца назад

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

GHSA-9483-pcvr-wj53

CVSS3: 7.5

github

3 месяца назад

EPSS

Процентиль: 25%

0.00324

Низкий

7.5 High

CVSS3

7.8 High

CVSS2