critical9.1
CVE-2025-41268
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R250217104…
Impact
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to delete arbitrary files on the Host machines.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Waterfall-Security | Wf-500 Firmware | through 7.9.1.0_r2502171040 |