CVE-2017-5634
N/A
N/A
Summary
The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://www.youtube.com/watch?v=2j9gP5Qu2WA
- http://www.securityfocus.com/bid/96230
- https://www.youtube.com/watch?v=WSQW0ipnXQg
- https://bugemot.com/bug/190
References
- https://www.youtube.com/watch?v=2j9gP5Qu2WA
- http://www.securityfocus.com/bid/96230
- https://www.youtube.com/watch?v=WSQW0ipnXQg
- https://bugemot.com/bug/190
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.