What is CVE-2025-40807?

CVE-2025-40807 is a medium-severity vulnerability in Siemens Gridscale X Prepay, classified under Authentication Bypass by Capture-replay. CVSS score: 6.3/10. Published 2025-12-09.

How severe is CVE-2025-40807?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in Siemens Gridscale X Prepay

CVE-2025-40807

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establis…

EPSS: 0.003 (17.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Siemens Gridscale X Prepay — versions 0
Siemens Gridscale_x_prepay

Weakness classification (CWE)

CWE-294 — Authentication Bypass by Capture-replay

References

productcert@siemens.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-40807?: CVE-2025-40807 is a medium-severity vulnerability in Siemens Gridscale X Prepay, classified under Authentication Bypass by Capture-replay. CVSS score: 6.3/10. Published 2025-12-09.
How severe is CVE-2025-40807?: Medium severity. CVSS v3 base score is 6.3 out of 10.