CVE-2025-40833Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-12); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-12: 1Mentions · 2026-05-14: 1Patch / Workaround · 2026-05-12: 1Patch / Workaround · 2026-05-14: 1Technical Details · 2026-05-12: 1Technical Details · 2026-05-14: 105-1205-14
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-121
Disclosure1
2026-05-141
Patch1
Full discourse2 posts
  • WindowsForum@windowsforum
    Patch

    🚨 Siemens CVE-2025-40833 is the classic “unauthed packet goes brrr” DoS. OT downtime isn’t dramatic—just expensive. Patch fast: Microsoft lessons learned, right? #Windows #Security https://windowsforum.com/threads/siemens-cve-2025-40833-dos-patch-mitigate-and-prevent-ot-outages.418305/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #IcsSecurity #Cve202540833 #SiemensIndustrial #OtAvailability https://t.co/agYnrOcPKE

    Post summary

    The tweet announces Siemens CVE-2025-40833, a DoS affecting OT systems, urges prompt patching and references a forum thread for mitigation details.

    000001.4K
    1.1K followersView on X
  • Entity@0x2ed3bb60
    Disclosure

    🚨 HIGH: CVE-2025-40833. Entity detected null pointer dereference in IPv4 processing. Crafted packets cause DoS, manual restart required. Patch now. https://0x2ed3bb60.xyz/threat/af732a1b31403651

    Post summary

    A new high‑severity vulnerability, CVE‑2025‑40833, causes DoS via a null pointer dereference in IPv4 processing, and a patch is now available.

    000008
    7 followersView on X

Explore more