CVEvulnerability
CVE-2017-5634
6.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-02-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-668
Description
The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.
Affected configurations
• norwegian-air norwegian air kiosk
Related
Weakness · CWE (1)
- CWE-668 Exposure of Resource to Wrong Sphere weakness
References
- http://www.securityfocus.com/bid/96230 www.securityfocus.com
- https://bugemot.com/bug/190 Third Party Advisory
- https://www.youtube.com/watch?v=2j9gP5Qu2WA Third Party Advisory
- https://www.youtube.com/watch?v=WSQW0ipnXQg Third Party Advisory
- http://www.securityfocus.com/bid/96230 www.securityfocus.com
- https://bugemot.com/bug/190 Third Party Advisory
- https://www.youtube.com/watch?v=2j9gP5Qu2WA Third Party Advisory
- https://www.youtube.com/watch?v=WSQW0ipnXQg Third Party Advisory