CVE-2025-11045 | BDVDB-2026-295658 Detail
WAYOSLQ_04
Description#
A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function of the file /usb_paswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
References#
- https://vuldb.com/?id.326082
- https://vuldb.com/?ctiid.326082
- https://vuldb.com/?submit.658913
- https://vuldb.com/?submit.661153
- https://vuldb.com/?submit.661168
- https://vuldb.com/?submit.661177
- https://vuldb.com/?submit.661178
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py3shgm1z88g9xp2?singleDoc
- https://www.yuque.com/yuqueyonghuexlgkz/zepczx/ogyduynf84q89x99?singleDoc
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.