Cyber Resilience

CVE-2025-41273

CriticalUpdated

Published: 29 May 2026

Published
29 May 2026
Modified
17 June 2026
KEV Added
Patch
CVSS Score v4 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0041 32.6th percentile
Risk Priority 70 floored blend · peak EPSS

Summary

CVE-2025-41273 is a critical-severity Authentication Bypass Using an Alternate Path or Channel (CWE-288) vulnerability in Waterfall-Security Wf-500 Firmware. Its CVSS base score is 9.3 (Critical).

Operationally, ranked at the 32.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability details

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers to bypass authentication of the Console…

more

web application and perform actions as an authenticated user.

CWE(s)

Related Threats

CVEs Like This One

CVE-2025-41276Same product: Waterfall-Security Wf-500
CVE-2025-41275Same product: Waterfall-Security Wf-500
CVE-2025-41272Same product: Waterfall-Security Wf-500
CVE-2025-41269Same product: Waterfall-Security Wf-500
CVE-2025-41266Same product: Waterfall-Security Wf-500
CVE-2025-41265Same product: Waterfall-Security Wf-500
CVE-2025-41267Same product: Waterfall-Security Wf-500
CVE-2025-41277Same product: Waterfall-Security Wf-500
CVE-2025-41279Same product: Waterfall-Security Wf-500
CVE-2025-41274Same product: Waterfall-Security Wf-500

Affected Assets

waterfall-security
wf-500 firmware
≤ 7.9.1.0_r2502171040

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

addresses: CWE-288

Authorizing remote access reduces the ability to bypass authentication via unauthorized alternate remote channels.

addresses: CWE-288

Users can identify logons via alternate paths or channels by reviewing the previous logon time.

addresses: CWE-288

Adaptive requirements can apply across access paths, reducing the ability to bypass authentication via alternate channels or paths.

addresses: CWE-288

Centralized IdPs close alternate authentication paths that enable bypass.

addresses: CWE-288

Enforces authentication for non-organizational users, making it harder to bypass via alternate paths or channels.

addresses: CWE-288

Requires authentication to occur exclusively over the isolated trusted path, directly preventing bypass via alternate or untrusted channels.

References