CVE-2017-5634

Severity: medium (CVSS 6.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-09 · updated 2026-06-17
Weakness: CWE-668

Description

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

Affected products

Norwegian-Air Norwegian Air Kiosk: all versions

References

http://www.securityfocus.com/bid/96230
https://bugemot.com/bug/190
https://www.youtube.com/watch?v=2j9gP5Qu2WA
https://www.youtube.com/watch?v=WSQW0ipnXQg
http://www.securityfocus.com/bid/96230
https://bugemot.com/bug/190
https://www.youtube.com/watch?v=2j9gP5Qu2WA
https://www.youtube.com/watch?v=WSQW0ipnXQg

Get alerted when CVE-2017-5634 or the next vulnerability affects your stack