2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:norwegian-air:norwegian_air_kiosk:-:*:*:*:*:*:*:*","matchCriteriaId":"93320E3F-9B9F-475A-957D-A07CBAB5951C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended \"Please select booking identification\" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog."},{"lang":"es","value":"El terminal de la aerolínea Norwegian Air Shuttle (también conocida como norwegian.com) permite a atacantes físicamente próximos eludir el paso de IU destinada \"Por favor seleccione la identificación de la reserva\", y obtener privilegios administrativos y acceso a la red en el SO Windows subyaciente, al acceder a un icono de impresión en la pantalla táctil para manipular el dialogo de impresión."}],"id":"CVE-2017-5634","lastModified":"2026-06-17T01:20:53.460","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":0.7,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-02-09T16:59:00.133","references":[{"source":"cve@mitre.org","url":"http://www.securityfocus.com/bid/96230"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://bugemot.com/bug/190"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://www.youtube.com/watch?v=2j9gP5Qu2WA"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://www.youtube.com/watch?v=WSQW0ipnXQg"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securityfocus.com/bid/96230"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://bugemot.com/bug/190"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.youtube.com/watch?v=2j9gP5Qu2WA"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.youtube.com/watch?v=WSQW0ipnXQg"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-668"}],"source":"nvd@nist.gov","type":"Primary"}]}
|