CVE-2015-3950

Publication date

2015-06-05 10:00:00

Family

icscert

State

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.