CVE-2022-41489: Wayos Lq-04 Firmware

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_upload.htm.

Affected products

• Wayos Lq-04 Firmware: version 22.03.17 only
• Wayos Lq-05 Firmware: version 22.03.17 only
• Wayos Lq-06 Firmware: version 22.03.17 only
• Wayos Lq-07 Firmware: version 22.03.17 only
• Wayos Lq-08 Firmware: version 22.03.17 only
• Wayos Lq-09 Firmware: version 22.03.17 only

Published 2022-10-13. Last modified 2026-06-17.