VULNERABILITY INTELLIGENCE
CVE-2025-41278
CVSS score7.5 HIGH
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-05-29
Last modified2026-07-21
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
Weakness classification
- CWE-125: Out-of-bounds Read
Primary references
- prodsec@nozominetworks.com — Vendor Advisory