Medium severity6.3NVD Advisory· Published Dec 9, 2025· Updated Jun 17, 2026
CVE-2025-40807
CVE-2025-40807
Description
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
30+ 2 more
- (no CPE)range: 0
- (no CPE)range: <V4.2.1
- cpe:2.3:a:siemens:gridscale_x_prepay:*:*:*:*:*:*:*:*range: <4.2.1
Patches
Vulnerability mechanics
References
1- cert-portal.siemens.com/productcert/html/ssa-356310.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.