What’s Vulnerable › Vulnerabilities

CVE-2025-11045: WAYOS LQ_04/LQ_05/LQ_06/LQ_07/LQ_09 usb_paswd.asp command injection

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-26 · updated 2026-10-18
• Weakness: CWE-74

Description

A vulnerability was identified in WAYOS LQ_04, LQ_05, LQ_06, LQ_07 and LQ_09 22.03.17. This affects an unknown function of the file /usb_paswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Affected products

• WAYOS LQ_04: 22.03.17
• WAYOS LQ_05: 22.03.17
• WAYOS LQ_06: 22.03.17
• WAYOS LQ_07: 22.03.17
• WAYOS LQ_09: 22.03.17

References

• https://vuldb.com/?ctiid.326082
• https://vuldb.com/?id.326082
• https://vuldb.com/?submit.658913
• https://vuldb.com/?submit.661153
• https://vuldb.com/?submit.661168
• https://vuldb.com/?submit.661177
• https://vuldb.com/?submit.661178
• https://www.yuque.com/yuqueyonghuexlgkz/zepczx/ogyduynf84q89x99?singleDoc
• https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py3shgm1z88g9xp2?singleDoc
• https://www.yuque.com/yuqueyonghuexlgkz/zepczx/ogyduynf84q89x99?singleDoc
• https://www.yuque.com/yuqueyonghuexlgkz/zepczx/py3shgm1z88g9xp2?singleDoc

Get alerted when CVE-2025-11045 or the next vulnerability affects your stack