XZERES 442SR Wind Turbine CSRF Vulnerability (CVE-2015-3950)

XZERES 442SR Wind Turbine CSRF Vulnerability (CVE-2015-3950)
XZERES 442SR Wind Turbine CSRF Vulnerability (CVE-2015-3950)

Release date:
Updated on:

Affected Systems:

XZERES 442SR Wind Turbine

Description:

CVE (CAN) ID: CVE-2015-3950

442SR Wind Turbine is a Web-based interface system.

On the 442SR wind turbines device, XZERES 442SR OS has a Cross-Site Request Forgery Vulnerability. Remote attackers can use GET requests to hijack the authentication requests of other default admin users.

<* Source: Maxim Rupp

Link: https://ics-cert.us-cert.gov/advisories/ICSA-15-155-01
*>

Suggestion:

Vendor patch:

XZERES
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Www.xzeres.com

This article permanently updates the link address: