Wavestore

wavestore

3 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Video Management Software Server

video_management_software_server

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-65076 1Wavestore 1Video Management Software Server Dec 22, 2025 Dec 16, 2025 8.6 HIGH· v4 6.1 MEDIUM· v3 N/A· v2 WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete any file on the server usin...Show more WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete any file on the server using path traversal in the ilog script. This script is being run with root privileges. This issue was fixed in version 6.44.44Show less
CVE-2025-65075 1Wavestore 1Video Management Software Server Dec 22, 2025 Dec 16, 2025 5.1 MEDIUM· v4 6.5 MEDIUM· v3 N/A· v2 WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete files, with the permissions...Show more WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete files, with the permissions of dvr user, on the server using path traversal in the alog script. This issue was fixed in version 6.44.44Show less
CVE-2025-65074 1Wavestore 1Video Management Software Server Dec 22, 2025 Dec 16, 2025 8.6 HIGH· v4 7.2 HIGH· v3 N/A· v2 WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the serve...Show more WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr script. This issue was fixed in version 6.44.44Show less