SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) vulnerabilities

2 known vulnerabilities in SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  IE/PB LINK HA (6GK1411-5BB00): NULL Pointer Dereference

  CVE-2025-40833May 12, 2026Siemens

  The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system.

• 9.8 Critical severity

  OpenSSL: Out-of-bounds Write

  CVE-2025-15467Jan 27, 2026OpenSSLEPSS 74.8%

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote co