Vulnerability Details CVE-2015-3950
Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.1%
CVSS Severity
CVSS v2 Score 6.8
Products affected by CVE-2015-3950
-
-
cpe:2.3:o:xzeres:442sr_os:-