CVE-2022-41489
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This …
Published: 2022-10-13 · CVSS: 8.1 · CVSS 3.1
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7