Read the docs

Xzeres

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Xzeres records in CISA KEV

No Xzeres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
442sr Os 3 records LOW 442sr 1 record LOW

Records

3 records

TI-2015-03336 CVE-2015-3950 · GHSA-m359-63q6-c3cc

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET r…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00624 Published 2015-06-05 No fix listed CWE-352
TI-2015-00898 CVE-2015-0985 · GHSA-83vx-rxxm-g8g3

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET requ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00631 Published 2015-03-31 No fix listed CWE-352
Open these records in search →