Siemens Gridscale X Prepay
Advisory ansehen veröffentlicht 2025-12-09
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40807US | medium5.4OT erhöht | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could all… | ||||
| CVE-2025-40806US | — | — | ||
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay - CSAF Versionself
- SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay - HTML Versionself
- ICS Advisory ICSA-25-345-09 JSONself
- ICS Advisory ICSA-25-345-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenGridscale X Prepay
Please contact your local Siemens representative for further information.
- BehobenGridscale X Prepay
Please contact your local Siemens representative for further information.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan