CVE-2025-40807: Siemens Gridscale X Prepay

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.

Affected products

• Siemens Gridscale X Prepay: before 4.2.1 (fixed in 4.2.1)

Published 2025-12-09. Last modified 2026-10-07.