CVE-2025-41281

HighCVSS 7.8

Published: 29/05/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

40th percentile - higher than 40% of all known CVEs

Summary

A CWE-78 OS Command Injection vulnerability was identified in Waterfall WF-500 RX Host version 7.9.1.0 R2502171040. Attackers with access to the TX Host can execute code on the RX Host when a MySQL connector is configured.

Risk Assessment

The organization is at risk of remote code execution on the vulnerable device, potentially leading to system compromise, data theft, or disruption of industrial network operations.

Recommendation

Immediately update the Waterfall WF-500 RX Host software to the latest patched version. Until then, restrict access to the TX Host and configure the MySQL connector only in a trusted environment.

Other vulnerabilities in Waterfall WF-500 RX Host

CVE-2025-41279High
CWE-78 (OS Command Injection) vulnerability in the Administration WebUI of Waterfall WF-500 RX Host version 7.9.1.0 R2502171040. A remote authenticated attacker can execute arbitrary operating system commands on the host.

Original NVD description (English source)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code on the RX Host when a MySQL connector is configured.