An out‑of‑bounds read in the RX Host of the Waterfall WF‑500 allows an attacker controlling the TX Host to execute arbitrary code on the RX Host. The flaw is a classic CWE‑125 vulnerability that can be abused to compromise the integrity and confidentiality of the RX Host, potentially enabling full control over the device.

The affected product is Nozomi Networks' Waterfall WF‑500. The vulnerability exists in the RX Host software version 7.10.0.0 R2601141040. No other versions are listed. Only the WF‑500 model is impacted; thus systems running older firmware or other Nozomi products remain unaffected unless they share the same code base.

The CVSS score of 7.5 indicates a high‑severity risk. EPSS data is not available, so the current exploitation probability is unknown. The vulnerability is not listed in CISA's KEV catalog, so no publicly known exploits have been reported. The attack vector is inferred to be local or network‑based access to the TX Host, which then exploits the RX Host via the out‑of‑bounds read to achieve remote code execution.