CVE-2025-41274

Waterfall WF-500 TX and RX Hosts (Console WebUI) with version 7.9.1.0 R2502171040 is affected by a CWE-78 OS Command Injection vulnerability. Nozomi Networks Labs identifies that remote, unauthenticated attackers can execute arbitrary operating system commands on the device via the Console WebUI....