SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay
view advisory published 2025-12-09
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40807US | medium5.4OT elevated | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could all… | ||||
| CVE-2025-40806US | — | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- FixedGridscale X Prepay
Please contact your local Siemens representative for further information.
- FixedGridscale X Prepay
Please contact your local Siemens representative for further information.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan