CVE-2025-40806: Siemens Gridscale X Prepay

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack with valid users.

Affected products

• Siemens Gridscale X Prepay: before 4.2.1 (fixed in 4.2.1)

Published 2025-12-09. Last modified 2026-10-07.