Nozomi Networks Labs identified an OS command injection vulnerability (CWE-78) in the Administration WebUI of Waterfall WF-500 RX Host version 7.9.1.0 R2502171040. This vulnerability allows remote attackers with authentication privileges to execute arbitrary OS commands on the device. The CVSS v4.0 base score is 8.6, indicating high severity, with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation enables remote authenticated attackers to execute arbitrary operating system commands on the WF-500 RX Host, potentially leading to full compromise of the device's confidentiality, integrity, and availability. This could disrupt device operations or allow further attacks within the network environment. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative access to trusted users only and monitor for suspicious activity related to the Administration WebUI. Avoid exposing the administration interface to untrusted networks. Follow vendor communications closely for updates on patches or mitigations.