VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 31, 2015· Updated Jun 17, 2026

CVE-2015-0985

CVE-2015-0985

Description

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Xzeres/442sr OS3 versions
    cpe:2.3:h:xzeres:442sr:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:xzeres:442sr:*:*:*:*:*:*:*:*
    • cpe:2.3:o:xzeres:442sr_os:*:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.