Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 51
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 48
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticat…
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-05-29 · No fix listed CWE-288
Priority MEDIUM 46
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbi…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00437 · Published 2026-05-29 · No fix listed CWE-23
Priority MEDIUM 44
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary fil…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00434 · Published 2026-05-29 · No fix listed CWE-23
Priority MEDIUM 41
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040…
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00882 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 41
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…
CVSS 4.0HIGH 8.5· Network · High privileges · User interaction · EPSS 0.00882 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 41
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00882 · Published 2026-05-29 · No fix listed CWE-78
Priority MEDIUM 41
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040…
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00882 · Published 2026-05-29 · No fix listed CWE-78
Priority LOW 35
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with a…
CVSS 4.0HIGH 7.5· Local · No auth · No interaction · EPSS 0.00505 · Published 2026-05-29 · No fix listed CWE-78
Priority LOW 34
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when…
CVSS 4.0HIGH 7.5· Local · No auth · No interaction · EPSS 0.00146 · Published 2026-05-29 · No fix listed CWE-23
Priority LOW 34
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
CVSS 4.0HIGH 7.5· Local · No auth · No interaction · EPSS 0.0012 · Published 2026-05-29 · No fix listed CWE-125