CVE-2019-9019 affects British Airways Entertainment System on Boeing 777-36N(ER)

guest · Feb 24, 2019

CVE-2019-9019 affects British Airways Entertainment System on Boeing 777-36N(ER)
February 24, 2019
https://securityaffairs.co/wordpres...rways-entertainment-system-cve-2019-9019.html

Experts discovered a critical vulnerability in the British Airways Entertainment System. The flaw is a privilege escalation issue that resides in the component USB Handler, an attacker could exploit it using an unknown input to escalate privileges.

The affected British Airways Entertainment System is installed on Boeing 777-36N(ER) and possibly other aircraft, it does not prevent the USB charging/data-transfer feature from interacting with USBkeyboard and mouse devices.
The flaw was reported on 02/22/2019, it was tracked as CVE-2019-9019, a local unauthenticated attacker could potentially exploit it.

At the time of writing, there are neither technical details nor an exploit publicly available.
Click to expand...

guest · Mar 8, 2019

Buffer overflow flaw in British Airways in-flight entertainment systems will affect other airlines, but why try it in the air?
Researcher's stumbling on bug was risky to say the least
March 8, 2019
https://www.theregister.co.uk/2019/03/08/thales_topseries_vuln/

A cybersecurity professor has insisted he was not hunting for a vulnerability when he found a denial-of-service bug on an in-flight entertainment screen during a long-haul flight. His findings could affect a number of airliners running Thales-made equipment.

"I didn't know that the application will crash," he said when we asked what he would have done if his actions had crashed the entire IFE system shortly after takeoff on a nine-hour flight, "so I was not probing any vulnerability because I didn't know the existence of any vulnerability at that time."
The affected vendor here is not British Airways
The Register can reveal that the affected software is in fact made and maintained by Thales Group under the trade name Thales TopSeries i5000. BA is a Thales customer.
Click to expand...

Log in or Sign up

CVE-2019-9019 affects British Airways Entertainment System on Boeing 777-36N(ER)

guest Guest

guest Guest

Log in or Sign up

CVE-2019-9019 affects British Airways Entertainment System on Boeing 777-36N(ER)

guest Guest

guest Guest

Useful Searches