CVE-2015-3950

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for…

published June 5, 2015

CVSS
—
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.2th percentile
Published
2015-06-05T10:00Z
EPSS history
Timeline
  • 05 JUN 10:00Z
    Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for…
    cvelistv5