CVE-2017-5634: Norwegian-Air Norwegian Air Kiosk

Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to manipulate the print dialog.

Affected products

• Norwegian-Air Norwegian Air Kiosk: affected versions not specified

Published 2017-02-09. Last modified 2026-06-17.