CVE-2017-5634
Last modified
CVE-2017-5634 is a vulnerability of currently unknown severity. The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Norwegian-Air | Norwegian Air Kiosk | All versions |
References
- https://bugemot.com/bug/190Third Party Advisory
- https://www.youtube.com/watch?v=2j9gP5Qu2WAThird Party Advisory
- https://www.youtube.com/watch?v=WSQW0ipnXQgThird Party Advisory
- https://bugemot.com/bug/190Third Party Advisory
- https://www.youtube.com/watch?v=2j9gP5Qu2WAThird Party Advisory
- https://www.youtube.com/watch?v=WSQW0ipnXQgThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5634?
How severe is CVE-2017-5634?
How do I fix CVE-2017-5634?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-5627An issue was discovered in Artifex Software, Inc. MuJS befor…7.8
- CVE-2017-5628An issue was discovered in Artifex Software, Inc. MuJS befor…7.8
- CVE-2017-5630PECL in the download utility class in the Installer in PEAR …7.5
- CVE-2017-5631An issue was discovered in KMCIS CaseAware. Reflected cross …
- CVE-2017-5632An issue was discovered on the ASUS RT-N56U Wireless Router …
- CVE-2017-5633Multiple cross-site request forgery (CSRF) vulnerabilities o…
- CVE-2017-5635In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluste…
- CVE-2017-5636In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluste…
- CVE-2017-5637Two four letter word commands "wchp/wchc" are CPU intensive …
- CVE-2017-5638The Jakarta Multipart parser in Apache Struts 2 2.3.x before…9.8
- CVE-2017-5639Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-5640It was noticed that a malicious process impersonating an Imp…
Are you affected by CVE-2017-5634?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST