The Deutsche Bahn Ticket Vending Machine suffers from a local kiosk privilege escalation vulnerability.