The vulnerability is an OS Command Injection flaw (CWE‑78) in the Waterfall WF‑500 RX Host. An attacker who can interact with the TX Host and has a MySQL connector configured can cause arbitrary command execution on the RX Host. Successful exploitation would give the attacker full control over the RX Host, enabling data exfiltration, lateral movement, or further compromise of the Nozomi Networks environment. The flaw stems from unsanitized user input being passed to system command execution.

Waterfall WF‑500 RX Host version 7.9.1.0 R2502171040 from the vendor Nozomi Networks. No other versions or products are currently known to be impacted.

The CVSS score of 7.5 indicates significant severity. EPSS information is unavailable, so the probability of exploitation is not quantified, and the CVE is not listed in the CISA KEV catalog. The flaw can be leveraged by an attacker who has access to the TX Host and can configure or manipulate the MySQL connector. Because the injection occurs at command‑line level, exploitation is straightforward once the attack vector is achieved.