PatchTheCVECVE-2017-3217: CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed wh
CVE-2017-3217 is a high-severity flaw (CVSS 8.1) affecting lmu 3030 obd-ii firmware, lmu 3030 cdma firmware, lmu 3030 gsm firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the device (via an IMSI Catcher, for example) to send administrative commands to the device. These commands can be used to provide ongoing, real-time acces
Why this priority
- High severity
- Remotely exploitable, no login, no user action
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 8.1 (High) |
| Attack vector | Network (remote) |
| Attack complexity | High |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.0% (top 19%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2018-07-24 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-3217?
lmu 3030 obd-ii firmware: mitigate or apply the listed mitigation; lmu 3030 cdma firmware: mitigate or apply the listed mitigation; lmu 3030 gsm firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-3217 being exploited?
CVE-2017-3217 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-3217 affect?
CVE-2017-3217 affects lmu 3030 obd-ii firmware, lmu 3030 cdma firmware, lmu 3030 gsm firmware. Severity is high (CVSS 8.1). CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwis
How urgent is CVE-2017-3217?
Priority 54/100. High severity; Remotely exploitable, no login, no user action