User Enumeration Vulnerability in Gridscale X Prepay by Siemens
CVE-2025-40806
6.9MEDIUM
What is CVE-2025-40806?
A vulnerability has been identified in Gridscale X Prepay versions prior to 4.2.1, allowing for user enumeration through distinguishable responses. This flaw may enable an unauthenticated remote attacker to ascertain valid usernames, thereby facilitating subsequent brute force attacks against the system. It is crucial for users of the affected product to implement necessary security measures to mitigate potential risks.
Affected Version(s)
Gridscale X Prepay 0
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved