Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Xzeres Clear all filters
TI-2015-03336 CVE-2015-3950 · GHSA-m359-63q6-c3cc

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that select a different default admin user via a GET r…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00624 Published 2015-06-05 No fix listed CWE-352
TI-2015-00898 CVE-2015-0985 · GHSA-83vx-rxxm-g8g3

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET requ…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00631 Published 2015-03-31 No fix listed CWE-352