CVE-2025-40807

Publication date

2025-12-09 10:44:26

Family

siemens

State

PUBLISHED

Description

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions.