Unscored CVE-2015-3950 EUVD-2015-3981GHSA-m359-63q6-c3cc

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authenticat…

Published Jun 5, 2015 · Updated Aug 6, 2024 · Assigned by icscert

Description

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.

Advisories 1

ICSA-15-155-01 XZERES 442SR Wind Turbine CSRF Vulnerability CISA ICS & IT advisories · Jun 6, 2025

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-155-01
75032 vdb-entry