medium6.8
CVE-2015-3950
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for re…
Impact
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xzeres | 442sr Os | All versions |