CVE-2022-41489
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm.
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products