PatchTheCVECVE-2017-15643: An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2
CVE-2017-15643 is a high-severity flaw (CVSS 7.4) affecting ikarus antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client to initiate an update transaction by modifying an update field within an HTTP 200 response, so that it refers to a nonexistent update. The attacker then
Why this priority
- High severity
- EPSS top 6%: very likely to be exploited
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.4 (High) |
| Attack vector | Local |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 6.4% (top 6%) |
| CISA exploited list | No |
| Weakness | CWE-444 |
| Published | 2017-10-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Exploit-DB: Ikraus Anti Virus 2.16.7 - Remote Code Execution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-15643?
ikarus antivirus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-15643 being exploited?
CVE-2017-15643 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-15643 affect?
CVE-2017-15643 affects ikarus antivirus. Severity is high (CVSS 7.4). An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of t
How urgent is CVE-2017-15643?
Priority 54/100. High severity; EPSS top 6%: very likely to be exploited; Public exploit reference