Waterfall WF-500 vulnerabilities
17 published CVEs name Waterfall WF-500 among the affected products.
- Published CVEs
- 17
- Last 12 months
- 17
- Critical
- 8
- Known exploited
- 0
Critical 8High 9Medium 0Low 0Not scored 0
Newest CVEs
- CVE-2025-41281
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX…
Waterfall · WF-500
High7.5 - CVE-2025-41280
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers…
Waterfall · WF-500
High7.5 - CVE-2025-41279
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration…
Waterfall · WF-500
High8.6 - CVE-2025-41278
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to…
Waterfall · WF-500
High7.5 - CVE-2025-41277
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in…
Waterfall · WF-500
Critical9.3 - CVE-2025-41276
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in…
Waterfall · WF-500
Critical9.3 - CVE-2025-41275
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in…
Waterfall · WF-500
Critical9.3 - CVE-2025-41274
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in…
Waterfall · WF-500
Critical9.3 - CVE-2025-41273
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in…
Waterfall · WF-500
Critical9.3 - CVE-2025-41272
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in…
Waterfall · WF-500
Critical9.3