CVE-2017-5634

6.6 mediumEPSS 0.4%

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

Severity

CVSS 3.0

6.6 medium

CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-668
Published: 2017-02-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

norwegian-air:norwegian_air_kiosk

References

http://www.securityfocus.com/bid/96230
https://bugemot.com/bug/190
https://www.youtube.com/watch?v=2j9gP5Qu2WA
https://www.youtube.com/watch?v=WSQW0ipnXQg
http://www.securityfocus.com/bid/96230

Check your stack JSON