Unrated severityNVD Advisory· Published Mar 31, 2015· Updated May 6, 2026
CVE-2015-0985
CVE-2015-0985
Description
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- ics-cert.us-cert.gov/advisories/ICSA-15-076-01nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.