What’s Vulnerable › Vulnerabilities

CVE-2024-37825

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-24 · updated 2026-06-17
• Weakness: CWE-22

Description

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.

References

• https://gist.github.com/J0rdanis99/74ae1ee2f9777cdd1c9756f958064d7c
• https://www.envisionware.com/?lang=au
• https://www.envisionware.com/pcres/?lang=au
• https://gist.github.com/J0rdanis99/74ae1ee2f9777cdd1c9756f958064d7c
• https://www.envisionware.com/?lang=au
• https://www.envisionware.com/pcres/?lang=au

Get alerted when CVE-2024-37825 or the next vulnerability affects your stack