CVE-2017-5634: The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass...

Security readout for executives and security teams

This CVE describes a physical kiosk escape in Norwegian Air Shuttle airline kiosks. A person at the touchscreen could bypass the normal booking-identification flow and reach administrative Windows privileges and network access. The record does not identify versions, patch status, or current deployments. Exposure appears limited to Norwegian Air Shuttle or norwegian.com airline kiosks using the affected kiosk configuration. The source bundle lists affected vendor, product, and versions as n/a, so broader exposure cannot be inferred. Treat this as high priority only if similar kiosks remain deployed or inherited systems were not rebuilt. The business risk is local compromise of public-facing airport infrastructure with potential internal network exposure. Mitigation focus: Check Norwegian Air Shuttle or kiosk vendor guidance for any official fix.; Inventory kiosk images and locations matching this historical configuration.; Evaluate kiosk lockdown, print UI exposure, and Windows privilege boundaries..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.