Approved changes feed: RSS · Atom
cpe:2.3:a:waterfall:wf-500:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Waterfall (3dcfd7ab-da99-5411-9f19-6f075bdc304a) |
|---|---|
| Product | Wf 500 (ed646b58-2d2b-57e5-a402-b8afafe3b3f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41281 |
vulnerable | 2026-06-08 07:25:06.843399 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured.
Published: 2026-05-29T11:00:16.558Z
Updated: 2026-05-29T13:36:44.165Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41280 |
vulnerable | 2026-06-08 07:25:06.843035 |
Details available
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured and file compression is enabled.
Published: 2026-05-29T10:59:40.686Z
Updated: 2026-05-29T13:37:18.914Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41279 |
vulnerable | 2026-06-08 07:25:06.842605 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 RX Host.
Published: 2026-05-29T10:59:10.976Z
Updated: 2026-05-29T13:38:35.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41278 |
vulnerable | 2026-06-08 07:25:06.842365 |
Details available
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
Published: 2026-05-29T10:58:37.123Z
Updated: 2026-05-29T13:39:01.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41277 |
vulnerable | 2026-06-08 07:25:06.842021 |
Details available
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.
Published: 2026-05-29T10:57:59.758Z
Updated: 2026-05-29T13:39:31.000Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41276 |
vulnerable | 2026-06-08 07:25:06.838185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41275 |
vulnerable | 2026-06-08 07:25:06.837877 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41274 |
vulnerable | 2026-06-08 07:25:06.837682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41273 |
vulnerable | 2026-06-08 07:25:06.837487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41272 |
vulnerable | 2026-06-08 07:25:06.837282 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41271 |
vulnerable | 2026-06-08 07:25:06.836980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41270 |
vulnerable | 2026-06-08 07:25:06.836674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41269 |
vulnerable | 2026-06-08 07:25:06.836378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41268 |
vulnerable | 2026-06-08 07:25:06.836043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41267 |
vulnerable | 2026-06-08 07:25:06.835689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41266 |
vulnerable | 2026-06-08 07:25:06.835436 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41265 |
vulnerable | 2026-06-08 07:25:06.834997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.