PT-2026-44809 · Waterfall+1 · Wf-500+1

Publicado 2026-05-29 · Atualizado 2026-05-29 · CVE-2025-41271

Mitre

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to read arbitrary files from the device.

Correção

Relative Path Traversal

Enumeração de Fraquezas

CWE-23

Identificadores relacionados

CVE-2025-41271

Produtos afetados

Wf-500

Wf-500 Firmware

Referências · 2

• https://nozominetworks.com/labs/vulnerability-advisories-cve-2025-41271 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-41271 · Nota de Segurança