← Database

CVE-2022-41489

HIGH CVSS: 8.1 Published: 2022-10-13 Modified: 2026-06-17

Description

WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm.

Affected Platforms

Wayos Lq-04Wayos Lq-09Wayos Lq-07 FirmwareWayos Lq-05 FirmwareWayos Lq-05Wayos Lq-08 FirmwareWayos Lq-09 FirmwareWayos Lq-07Wayos Lq-06Wayos Lq-08

Weakness Type

CWE-352, CWE-352

References