CVE Intelligence

Vulnerabilidades de Waterfall-security

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Waterfall-security: 17 registro(s), com severidade, exploração e correções.

Wf-500 Firmware 17

Somente exploradas (KEV) →

CVE-2025-41281 Alta · 7.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured.
CVE-2025-41280 Alta · 7.8 CWE-23 29/05/2026
Relative Path Traversal em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is enabled.
CVE-2025-41279 Alta · 7.2 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 RX Host.
CVE-2025-41278 Alta · 7.8 CWE-125 29/05/2026
Out-of-bounds Read em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
CVE-2025-41277 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41276 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41275 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41274 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41273 Crítica · 9.8 CWE-288 29/05/2026
Authentication Bypass Using an Alternate Path or Channel em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web application and perform actions as an authenticated user.
CVE-2025-41272 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41271 Alta · 7.5 CWE-23 29/05/2026
Relative Path Traversal em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device.
CVE-2025-41270 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41269 Crítica · 9.8 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
CVE-2025-41268 Crítica · 9.1 CWE-23 29/05/2026
Relative Path Traversal em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbitrary files on the Host machines.
CVE-2025-41267 Alta · 7.2 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 TX Host.
CVE-2025-41266 Alta · 7.2 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 TX Host.
CVE-2025-41265 Alta · 7.2 CWE-78 29/05/2026
OS Command Injection em Waterfall-security Wf-500 Firmware
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 TX Host.