The issue allows physically proximate attackers to obtain sensitive information, such as hotel invoice content with personally identifiable information (PII), and potentially create unauthorized room keys, by entering a guest-search quote character and then accessing the underlying Windows OS. This affects the Ariane Duo kiosk mode. The vulnerability exposes the personal data of hotel guests, posing a significant risk to privacy. It is estimated that over 3,000 hotels are affected.