VYPR
Unrated severityNVD Advisory· Published Jun 5, 2015· Updated Jun 17, 2026

CVE-2015-3950

CVE-2015-3950

Description

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Xzeres/442sr OS2 versions
    cpe:2.3:o:xzeres:442sr_os:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:xzeres:442sr_os:-:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.