CVE-2015-3950: Xzeres 442sr OS

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET request.

Affected products

• Xzeres 442sr OS: affected versions not specified

Published 2015-06-05. Last modified 2026-06-17.