Nozomi Networks Labs discovered a CWE-23 Relative Path Traversal vulnerability in the Console WebUI of Waterfall WF-500 TX and RX Hosts running version 7.9.1.0 R2502171040. This vulnerability enables remote attackers with no authentication to read arbitrary files on the affected device by exploiting improper input validation in file path handling. The CVSS 4.0 score of 8.7 reflects its ease of exploitation over the network without privileges or user interaction and its high impact on confidentiality. The vendor has not provided an official fix or remediation details, and the product is not a cloud service, so remediation depends on vendor updates. There is no indication of active exploitation in the wild.

Successful exploitation allows remote unauthenticated attackers to read arbitrary files from the Waterfall WF-500 device, potentially exposing sensitive configuration or system files. This compromises confidentiality but does not indicate impact on integrity or availability. The high CVSS score reflects the severity of unauthorized data disclosure via network attack without any required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the Console WebUI and employing network-level controls to limit exposure may reduce risk.