CVE-2025-41278: High severity Nozomi Networks Waterfall WF-500 RX Host vulnerability
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Waterfall WF-500 RX Hostto a version that resolves this vulnerability.Fixed in 7.10.0.0 R2601141040
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41278?
CVE-2025-41278 has a severity rating of high, with a CVSS score of 7.5.
How do I fix CVE-2025-41278?
To fix CVE-2025-41278, upgrade to the latest version of Nozomi Networks Waterfall WF-500 RX Host that addresses this vulnerability.
What vulnerability does CVE-2025-41278 describe?
CVE-2025-41278 describes a CWE-125: Out-of-bounds Read vulnerability in the Waterfall WF-500 RX Host.
Who is affected by CVE-2025-41278?
CVE-2025-41278 affects users of Nozomi Networks Waterfall WF-500 RX Host version 7.10.0.0 R2601141040.
What kind of attack can be executed due to CVE-2025-41278?
CVE-2025-41278 allows attackers with access to the TX Host to execute code on the RX Host.