Siemens Gridscale X Prepay
view advisory published 2025-12-09
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40807US | medium5.4OT elevated | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could all… | ||||
| CVE-2025-40806US | — | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay - CSAF Versionself
- SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay - HTML Versionself
- ICS Advisory ICSA-25-345-09 JSONself
- ICS Advisory ICSA-25-345-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedGridscale X Prepay
Please contact your local Siemens representative for further information.
- FixedGridscale X Prepay
Please contact your local Siemens representative for further information.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan