Nozomi Networks Labs identified a flaw whereby an attacker can bypass authentication in the Console WebUI of Waterfall WF‑500, allowing them to gain full privileged access without credentials. The vulnerability is a classic Authentication Bypass Using an Alternate Path or Channel (CWE‑288). As a result, a malicious actor can read or modify any configuration, launch attacks from the device, or cause unauthorized control of the network equipment. This loss of confidentiality, integrity, and availability is significant because the device serves as a critical gateway for industrial network traffic.

The affected product is the Waterfall WF‑500 TX and RX Hosts operating the Console WebUI. Version 7.9.1.0 R2502171040 is vulnerable. All installations running this firmware or earlier versions are at risk.

The CVSS score of 9.3 reflects a severe vulnerability that can be exploited remotely. Although an EPSS score is not available, the lack of a KEV listing suggests that public exploits have not yet been observed, but the high severity warrants prompt action. Attackers can achieve bypass by sending requests to the web interface without authentication, implying that compromised network segments or compromised credentials on adjacent devices could potentially be used to reach the console. The vulnerability remains exploitable as long as the affected firmware is in use, with no known mitigations beyond patching.