CVE-2025-41265

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 TX Host.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-41265	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:waterfall-security:wf-500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:waterfall-security:wf-500:-:*:*:*:*:*:*:*

History

21 Jul 2026, 12:10

Type	Values Removed	Values Added
Summary		(es) Nozomi Networks Labs identificó un CWE-78: Neutralización Inadecuada de Elementos Especiales utilizados en un Comando del Sistema Operativo ('Inyección de Comandos del Sistema Operativo') en la Interfaz de Usuario Web de Administración (WebUI) en el Host Waterfall WF-500 TX en la versión 7.9.1.0 R2502171040 que permite a atacantes remotos autenticados ejecutar comandos arbitrarios del sistema operativo en el Host WF-500 TX.

01 Jun 2026, 18:58

Type	Values Removed	Values Added
References	~~() https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-41265 -~~	() https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-41265 - Vendor Advisory
CPE		cpe:2.3:h:waterfall-security:wf-500:-:::::::* cpe:2.3:o:waterfall-security:wf-500_firmware::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.2
First Time		Waterfall-security wf-500 Waterfall-security wf-500 Firmware Waterfall-security

29 May 2026, 12:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-29 12:16

Updated : 2026-07-21 12:10

NVD link : CVE-2025-41265

Mitre link : CVE-2025-41265

CVE.ORG link : CVE-2025-41265

JSON object : View

Products Affected

waterfall-security

wf-500_firmware
wf-500

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-41265", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41265", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-29T14:36:00.476872Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "prodsec@nozominetworks.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "prodsec@nozominetworks.com", "affectedData": [{"vendor": "Waterfall", "product": "WF-500", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "7.9.1.0 R2502171040"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-29T12:16:21.743", "references": [{"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-41265", "tags": ["Vendor Advisory"], "source": "prodsec@nozominetworks.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "prodsec@nozominetworks.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version 7.9.1.0 R2502171040 that allows remote authenticated attackers to execute arbitrary operating system commands on the WF-500 TX Host."}, {"lang": "es", "value": "Nozomi Networks Labs identific\u00f3 un CWE-78: Neutralizaci\u00f3n Inadecuada de Elementos Especiales utilizados en un Comando del Sistema Operativo ('Inyecci\u00f3n de Comandos del Sistema Operativo') en la Interfaz de Usuario Web de Administraci\u00f3n (WebUI) en el Host Waterfall WF-500 TX en la versi\u00f3n 7.9.1.0 R2502171040 que permite a atacantes remotos autenticados ejecutar comandos arbitrarios del sistema operativo en el Host WF-500 TX."}], "lastModified": "2026-07-21T12:10:00.090", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:waterfall-security:wf-500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "782D151E-F2E5-45F8-BAC5-AB1D5E71592F", "versionEndIncluding": "7.9.1.0_r2502171040"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:waterfall-security:wf-500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "84599551-DFC4-44DA-A647-24D4818F1EDE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "prodsec@nozominetworks.com"}