waterfall-security kayıtları

waterfall-security üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 7
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

17 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
37İzleyin	CVE-2025-41274İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41275İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41276İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41277İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41272İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41269İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41270İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,3	—	%1,4	29 May 2026
37İzleyin	CVE-2025-41273İstismar yok	Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500waterfall-security · wf-500 firmware · CWE-288 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,3	—	%0,4	29 May 2026
35İzleyin	CVE-2025-41268İstismar yok	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in versionwaterfall-security · wf-500 firmware · CWE-23 Kimlik doğrulamasız Yol geçişi	Yüksek8,8	—	%0,4	29 May 2026
34İzleyin	CVE-2025-41265İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,6	—	%0,9	29 May 2026
34İzleyin	CVE-2025-41266İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,6	—	%0,9	29 May 2026
34İzleyin	CVE-2025-41267İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,5	—	%0,9	29 May 2026
34İzleyin	CVE-2025-41279İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the waterfall-security · wf-500 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek8,6	—	%0,9	29 May 2026
34İzleyin	CVE-2025-41271İstismar yok	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.waterfall-security · wf-500 firmware · CWE-23 Kimlik doğrulamasız Yol geçişi	Yüksek8,7	—	%0,4	29 May 2026
30İzleyin	CVE-2025-41281İstismar yok	Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Watewaterfall-security · wf-500 firmware · CWE-78 RCE Komut enjeksiyonu	Yüksek7,5	—	%0,5	29 May 2026
30İzleyin	CVE-2025-41280İstismar yok	Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 thatwaterfall-security · wf-500 firmware · CWE-23 Yol geçişi	Yüksek7,5	—	%0,1	29 May 2026
30İzleyin	CVE-2025-41278İstismar yok	Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackwaterfall-security · wf-500 firmware · CWE-125 Bellek hatası	Yüksek7,5	—	%0,1	29 May 2026

CVE-2025-41274
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41275
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41276
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41277
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41272
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41269
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41270
37İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
KritikCVSS 9,3İstismar yokEPSS %1
- pre-auth RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41273
37İzleyin
Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500
KritikCVSS 9,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41268
35İzleyin
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41265
34İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41266
34İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41267
34İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
YüksekCVSS 8,5İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41279
34İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41271
34İzleyin
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.
YüksekCVSS 8,7İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41281
30İzleyin
Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Wate
YüksekCVSS 7,5İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41280
30İzleyin
Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that
YüksekCVSS 7,5İstismar yokEPSS %0
- Yol geçişi
waterfall-security · wf-500 firmware29 May 2026
CVE-2025-41278
30İzleyin
Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attack
YüksekCVSS 7,5İstismar yokEPSS %0
- Bellek hatası
waterfall-security · wf-500 firmware29 May 2026