CyberRota
Back to database

CVE-2025-41272

CRITICAL · CVSS 9.8 EPSS 1.38%

Source: NVD + CISA KEV + EPSS · Published: 2026-05-29 · Last synced: 2026-06-28

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2025-41272
Severity
CRITICAL
CVSS
9.8
EPSS
1.38%

Original NVD Description

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.