CVE-2025-11045

A vulnerability was identified in WAYOS LQ04, LQ05, LQ06, LQ07 and LQ09 22.03.17. This affects an unknown function of the file /usbpaswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2022-41489

WAYOS LQ09 22.03.17V was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usbupload.htm...

CVE-2022-41489: Cross-Site Request Forgery (CSRF)

WAYOS LQ09 22.03.17V was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usbupload.htm...

CVE-2022-41489

CVE-2022-41489 affects WayOS LQ_09 22.03.17V. A CSRF vulnerability exists in the Usb_upload.htm component due to a lack of authentication, allowing crafted requests to the server from the affected device. The issue is described across multiple sources (Red Hat, CVE listing, and vendor-related sum...