Wayos vulnerabilities
We track 3 vulnerabilities in Wayos products across 12 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2025.
Latest Wayos vulnerabilities
- 7.3 High severity
LQ_04: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function of the file /usb_paswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The expl
- 8.8 High severity
fbm_292w_firmware: Improper Control of Generation of Code
A vulnerability was discovered in FBM_292W-21.03.10V, which has been classified as critical. This issue affects the sub_4901E0 function in the msp_info.htm file. Manipulation of the path parameter can lead to command injection.
- 8.1 High severity
Lq-09 Firmware: Cross-Site Request Forgery
WAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the server from the affected device. This vulnerability is exploitable due to a lack of authentication in the component Usb_u