{"id":"CVE-2024-37825","aliases":["EUVD-2024-36836","GHSA-2h7h-cw5h-q23x"],"status":"published","title":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3...","description":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0042,"percentile":0.3672,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-06-24T00:00:00Z","modified":"2026-06-17T07:38:53Z","references":[{"url":"https://www.envisionware.com/?lang=au","tags":["x_transferred"]},{"url":"https://www.envisionware.com/pcres/?lang=au","tags":["x_transferred"]},{"url":"https://gist.github.com/J0rdanis99/74ae1ee2f9777cdd1c9756f958064d7c","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37825"},{"url":"https://github.com/advisories/GHSA-2h7h-cw5h-q23x"}],"sources":{"cve":[{"id":"CVE-2024-37825","description":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.","status":"published","published":"2024-06-24T00:00:00Z","modified":"2024-11-08T15:27:22.326Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:00.585327Z"}],"euvd":[{"id":"EUVD-2024-36836","description":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.","status":"published","published":"2024-06-24T00:00:00Z","modified":"2024-11-08T15:27:22Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:06.31936Z"}],"ghsa":[{"id":"GHSA-2h7h-cw5h-q23x","title":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3...","description":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.","status":"published","published":"2024-06-24T15:31:45Z","modified":"2024-11-08T18:31:49Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:58:46.386141Z"}],"nvd":[{"id":"CVE-2024-37825","description":"An issue in EnvisionWare Computer Access \u0026 Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2024) allows unauthenticated attackers on the same network to perform a directory traversal.","status":"published","published":"2024-06-24T14:15:12.43Z","modified":"2026-06-17T07:38:53.16Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:07.173605Z"}]}}