vulnwire
6.6med

CVE-2017-5634

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select boo…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
6.6
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 37%
Public exploits
0
none known

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

Exploit prediction (EPSS)

0.42% probability of exploitation in the next 30 days, higher than 37% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.06.6CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-668 Exposure of Resource to Wrong Sphere

References

  • youtube.com /watch?v=2j9gP5Qu2WA · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/96230 · vdb-entry, x_refsource_BID, x_transferred
  • youtube.com /watch?v=WSQW0ipnXQg · x_refsource_MISC, x_transferred
  • bugemot.com /bug/190 · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.