CVE-2024-37364

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Jun 6, 2024
Updated: Jun 7, 2024

Summary

CVE-2024-37364 is a cyber vulnerability that affects Ariane Allegro Scenario Player through 2024-03-05 when Ariane Duo kiosk mode is used. Physically proximate attackers can exploit this vulnerability to obtain sensitive information, such as hotel invoice content with personally identifiable information (PII), and potentially create unauthorized room keys. The attackers can achieve this by entering a guest-search quote character and then accessing the underlying Windows OS. The risk score for this vulnerability is 25 out of 100, with a base severity of MEDIUM. The exploitability score is 0.9, indicating a high likelihood of being exploited. The impact includes high integrity and confidentiality impacts, as well as a high availability impact. Remediation measures have not been provided in the available information.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-37364 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options