This vulnerability (CWE-601) in TR7 Cyber Defense Inc.'s Web Application Firewall allows an attacker to craft URLs that redirect users to untrusted external sites. Affected versions include 4.30 prior to 1.4.0.117. The vulnerability is classified as an Open Redirect, which can facilitate phishing by misleading users into visiting malicious websites. The CVSS v3.1 base score is 4.3, reflecting a medium severity with low impact on confidentiality and no impact on integrity or availability. The vulnerability requires no privileges and no user interaction to be triggered remotely over an adjacent network.

The primary impact is the potential facilitation of phishing attacks through URL redirection to untrusted sites. There is limited impact on confidentiality, integrity, or availability of the Web Application Firewall itself. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix is provided in the available data, users should monitor the vendor's communications for updates. Until a fix is available, caution should be exercised when handling URLs generated by the affected versions to avoid phishing risks.