CVE-2015-0985

Cross-site request forgery (CSRF) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote attackers to hijack the authentication of admins for requests that modify the default user's password via a GET request.

• CWE-352

• https://ics-cert.us-cert.gov/advisories/ICSA-15-076-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-076-01Third Party Advisory, US Government Resource

Published

Mar 31, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0979Heap-based buffer overflow in the SOAP web interface in SCAD…
• CVE-2015-0980Format string vulnerability in BACnOPCServer.exe in the SOAP…
• CVE-2015-0981The SOAP web interface in SCADA Engine BACnet OPC Server bef…
• CVE-2015-0982Buffer overflow in an unspecified DLL in Schneider Electric …
• CVE-2015-0983Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-0984Directory traversal vulnerability in the FTP server on Honey…
• CVE-2015-0986Multiple stack-based buffer overflows in Moxa VPort ActiveX …
• CVE-2015-0987Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices befo…10
• CVE-2015-0988Omron CX-One CX-Programmer before 9.6 uses a reversible form…
• CVE-2015-0989PACTware 4.1 SP3 allows remote attackers to cause a denial o…
• CVE-2015-0990Untrusted search path vulnerability in Ecava IntegraXor SCAD…
• CVE-2015-0991Inductive Automation Ignition 7.7.2 allows remote attackers …