CVE 8.7 HIGH

CVE-2025-41271_CVE-2025-41271

8.7 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device.

AI Analysis

Relative Path Traversal vulnerability in the Console WebUI of Waterfall WF-500 TX and RX Hosts

Basic Information

ID CVE-2025-41271
Source Nozomi
Published May 29, 2026 at 10:51

Affected Product

Vendor Waterfall
Product WF-500
Version 7.9.1.0 R2502171040
Affected Versions Waterfall WF-500 0

CWE Classification

AI Assessment

AI Score 8.7 / 10
AI Severity High
Vendor Waterfall
Product WF-500
Version 7.9.1.0 R2502171040

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.