Unknown · Wavestore Server · CVE-2025-65075
**Name of the Vulnerable Software and Affected Versions**
WaveView versions prior to 6.44.44
**Description**
A malicious attacker with high-privileges can read or delete files, with the permissions of the `dvr` user, on the server using path traversal in the `alog` script. The issue affects systems where users execute a restricted set of predefined commands and scripts on a connected WaveStore Server.
**Recommendations**
Update to version 6.44.44 or later.