Vendor

Waterfall Security

Products

CVEs

Across products

Status

Private

Products

Wf 500 Firmware
17 CVEs

Recent CVEs

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-41277	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41276	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41275	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41274	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41273	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.00	May 29, 2026	Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web…
CVE-2025-41272	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41270	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41269	Waterfall WF-500 RX Host	Cri	0.64	9.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41268	Waterfall WF-500 RX Host	Cri	0.59	9.1	0.00	May 29, 2026	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbitrary files on the Host machines.
CVE-2025-41281	Waterfall WF-500 RX Host	Hig	0.51	7.8	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a…
CVE-2025-41280	Waterfall WF-500 RX Host	Hig	0.51	7.8	0.00	May 29, 2026	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is…
CVE-2025-41278	Nozominetworks Waterfall WF-500 RX Host	Hig	0.51	7.8	0.00	May 29, 2026	Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
CVE-2025-41271	Waterfall WF-500 RX Host	Hig	0.49	7.5	0.00	May 29, 2026	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device.
CVE-2025-41279	Waterfall WF-500 RX Host	Hig	0.47	7.2	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41267	Waterfall WF-500 RX Host	Hig	0.47	7.2	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41266	Waterfall WF-500 RX Host	Hig	0.47	7.2	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41265	Waterfall WF-500 RX Host	Hig	0.47	7.2	0.01	May 29, 2026	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…

CVE-2025-41277CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41276CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41275CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41274CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41273CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.00
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web…
CVE-2025-41272CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41270CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41269CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.64cvss 9.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute…
CVE-2025-41268CriMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.59cvss 9.1epss 0.00
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbitrary files on the Host machines.
CVE-2025-41281HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.51cvss 7.8epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a…
CVE-2025-41280HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.51cvss 7.8epss 0.00
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is…
CVE-2025-41278HigMay 29, 2026
Nozominetworks
Waterfall WF-500 RX Host
risk 0.51cvss 7.8epss 0.00
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
CVE-2025-41271HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.49cvss 7.5epss 0.00
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device.
CVE-2025-41279HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.47cvss 7.2epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41267HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.47cvss 7.2epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41266HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.47cvss 7.2epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…
CVE-2025-41265HigMay 29, 2026
Waterfall
WF-500 RX Host
risk 0.47cvss 7.2epss 0.01
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute…