CVE-2024-37364

MEDIUM

Ariane Allegro Scenario Player <2024-03-05 - Info Disclosure

Title source: llm
STIX 2.1

Description

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information (such as hotel invoice content with PII), and potentially create unauthorized room keys, by entering a guest-search quote character and then accessing the underlying Windows OS.

References (2)

Core 2

Scores

CVSS v3 6.8
EPSS 0.0026
EPSS Percentile 16.7%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Published Jun 06, 2024
Tracked Since Feb 18, 2026