PatchTheCVECVE-2017-6042: A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4
CVE-2017-6042 is a high-severity flaw (CVSS 8.8) affecting airlink raven xe firmware, airlink raven xt firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a client into making an unintentional request to the web server that will be treated as an authentic request.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 8.8 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.6% (top 49%) |
| CISA exploited list | No |
| Weakness | CWE-352 |
| Published | 2017-06-30 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2017-6042?
airlink raven xe firmware: upgrade to newer than -; airlink raven xt firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2017-6042 being exploited?
CVE-2017-6042 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2017-6042 affect?
CVE-2017-6042 affects airlink raven xe firmware, airlink raven xt firmware. Severity is high (CVSS 8.8). A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by t
How urgent is CVE-2017-6042?
Priority 43/100. High severity
Related CVEs
- CVE-2017-6046 HIGH 7.5 UPGRADE MITIGATE An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions
- CVE-2017-6044 CRITICAL 9.8 UPGRADE MITIGATE An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.