{"id":"CVE-2017-6046","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-6046","generatedAt":"2026-10-28T23:13:58.547Z","title":"Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to information disclosure.","description":"An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Sensitive information is insufficiently protected during transmission and vulnerable to sniffing, which could lead to information disclosure.","published":"2017-06-30T03:29:01.000Z","lastModified":"2026-06-17T01:21:42.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-522","CWE-200"],"affected":["sierra wireless/airlink raven xe firmware","sierra wireless/airlink raven xt firmware"],"epss":{"score":0.01574,"percentile":0.75296,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/98036","tags":["Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02","tags":["Third Party Advisory","US Government Resource","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://www.securityfocus.com/bid/98036","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-115-02","tags":["Third Party Advisory","US Government Resource","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-6046","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}