CVE-2015-3950
XZERES 442SR OS - Cross-Site Request Forgery via Default Admin User Selection
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.
References (2)
Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-15-155-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/75032
Scores
EPSS
0.0064
EPSS Percentile
46.1%
Details
CWE
CWE-352
Status
published
Products (1)
xzeres/442sr_os
Published
Jun 05, 2015
Tracked Since
Feb 18, 2026