VULNERABILITY INTELLIGENCE

CVE-2017-5634

CVSS score6.6 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2017-02-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references