Is CVE-2017-15043 actively exploited?

No active exploitation of CVE-2017-15043 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2017-15043 be exploited remotely?

Yes. CVE-2017-15043 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2017-15043?

CVE-2017-15043 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2017-15043

HIGH

CVE-2017-15043

CWE-20Published: May 4, 2018· Updated: Jun 17, 2026

8.8

CVSS v3.1

Official Description

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. This vulnerability is due to insufficient input validation on user-controlled input in an HTTP request to the targeted device. An attacker in possession of router login credentials could exploit this vulnerability by sending a crafted HTTP request to an affected system.

NVD Source

Technical Analysis

CVE-2017-15043 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.