Siemens Gridscale X Prepay vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Siemens Gridscale X Prepay: 2 record(s), with affected versions and fixes.cpe:2.3:a:siemens:gridscale_x_prepay
CVE-2025-40807
Medium · 5.4
CWE-294 Dec 9, 2025
Authentication Bypass by Capture-replay in Siemens Gridscale X Prepay
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.
CVE-2025-40806
Medium · 5.3
CWE-204 Dec 9, 2025
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The…
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack with valid users.