CVE-2023-25946: Qrio Q-SL2 Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent attacker to analyze the product's communication data and conduct an arbitrary operation under certain conditions.

Affected products

• Qrio Q-SL2 Firmware: up to and including 2.0.9

Published 2023-05-23. Last modified 2026-06-17.