Approved changes feed: RSS · Atom

cpe:2.3:a:siemens:gridscale_x_prepay:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSiemens (4bd2a91b-02ad-5c3d-b25f-70697e0c9d7f)
ProductGridscale X Prepay (38be584c-8f57-59af-bce2-909ada5f5aa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-40807 vulnerable 2026-06-08 07:25:05.745835 Details available
MEDIUM (6.3)
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.
Published: 2025-12-09T10:44:26.973Z
Updated: 2025-12-09T16:43:08.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40806 vulnerable 2026-06-08 07:25:05.745483 Details available
MEDIUM (5.3)
A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to user enumeration due to distinguishable responses. This could allow an unauthenticated remote attacker to determine if a user is valid or not, enabling a brute force attack with valid users.
Published: 2025-12-09T10:44:25.884Z
Updated: 2025-12-09T16:01:14.863Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.