VULNERABILITY INTELLIGENCE

CVE-2015-0985

CVSS score6.8 NONE
EPSS probability0.63%
CISA KEVNot currently listed
Published2015-03-31
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references