Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console web application and perform actions as an authenticated user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🔴 Waterfall WF-500 Console WebUI Authentication Bypass, #CVE-2025-41273 (Critical) -DC-Jun2026-76 https://dailycve.com/waterfall-wf-500-console-webui-authentication-bypass-cve-2025-41273-critical-dc-jun2026-76/
Post summary
A new CVE (CVE‑2025‑41273) for an authentication bypass in the Waterfall WF‑500 Console WebUI is announced, but no further exploit, patch, or active exploitation information is provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | waterfall-security | wf-500 | - | - | - |
| OS | waterfall-security | wf-500_firmware | - | - | - |