Siemens Scalance SC636-2c vulnerabilities

2 CVEs affecting Siemens Scalance SC636-2c, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-40833, published 2026-05-12.

More from Siemens.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-40833, published 2026-05-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual…
• CVE-2025-23384, published 2025-03-11. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2.1), SCALANCE…