{"cve":"CVE-2017-5634","nvd":{"published":"2017-02-09T16:59:00.133","modified":"2026-06-17T01:20:53.460","status":"Modified","description":"The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended \"Please select booking identification\" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":6.6},"cwes":["CWE-668"],"references":["http://www.securityfocus.com/bid/96230","https://bugemot.com/bug/190","https://www.youtube.com/watch?v=2j9gP5Qu2WA","https://www.youtube.com/watch?v=WSQW0ipnXQg","http://www.securityfocus.com/bid/96230"],"products":["norwegian-air:norwegian_air_kiosk"],"source":"nvd","synced_at":"2026-10-19T20:41:54.846948762+00:00"},"epss":{"cve":"CVE-2017-5634","score":0.00421,"percentile":0.36478,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}