PT-2024-27768 · Envisionware · Envisionware Computer Access & Reservation Control Selfcheck+1

J0Rdanis99 · Published 2024-06-24 · Updated 2024-11-08 · CVE-2024-37825

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EnvisionWare Computer Access & Reservation Control SelfCheck version 1.0

Description The issue allows unauthenticated attackers on the same network to perform a directory traversal.

Recommendations For EnvisionWare Computer Access & Reservation Control SelfCheck version 1.0, update to OneStop 3.2.0.27184 Hotfix May 2024 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-37825

Affected Products

Envisionware Computer Access & Reservation Control Selfcheck

Onestop

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-37825 · Security Note
• https://envisionware.com/pcres/?lang=au · Note
• https://envisionware.com/?lang=au · Note
• https://gist.github.com/J0rdanis99/74ae1ee2f9777cdd1c9756f958064d7c · Note
• https://t.me/cvenotify/84188 · Telegram Post
• https://t.me/cvenotify/101093 · Telegram Post