Siemens Gridscale X Prepay User Enumeration Vulnerability

A user enumeration vulnerability has been identified in Siemens Gridscale X Prepay, affecting all versions prior to 4.2.1. The vulnerability arises from distinguishable responses that allow an unauthenticated remote attacker to determine the validity of usernames. This could facilitate a brute force attack using valid usernames.

Impact

Exploitation of this vulnerability could lead to unauthorized username enumeration, allowing attackers to identify valid users for potential brute force attacks.

Remediation

Siemens has released a new version for Gridscale X Prepay. Please contact your local Siemens representative for further information.