CVE-2025-41280

Name of the Vulnerable Software and Affected Versions Waterfall WF-500 RX Host version 7.9.1.0 R2502171040

Description A Relative Path Traversal (Zip Slip) issue exists, which occurs when an application fails to properly validate the filenames within a compressed archive, potentially allowing files to be written to arbitrary locations. This allows attackers with access to the TX Host to execute code on the RX Host, provided that a MySQL connector is configured and file compression is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.