CyberRota
← Ana sayfaya dön

CVE-2025-41277

CRITICAL · CVSS 9.8 EPSS %1.38

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-29T12:16:24.167 · Çekilme zamanı: 2026-06-28T12:00:31.823684+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2025-41277
Severity
CRITICAL
CVSS
9.8
EPSS
%1.38

Orijinal NVD Açıklaması

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to execute arbitrary operating system commands on the device.