Missing authentication in CalAmp LMU 3030 OBD-II
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the device (via an IMSI Catcher, for example) to send administrative commands to the device. These commands can be used to provide ongoing, real-time access to the device and can configure parameters such as IP addresses, firewall rules, and passwords.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| CalAmp | LMU 3030 OBD-II | CDMA; GSM | — | No fix listed | CNA |
- LMU 3030 OBD-II VendorCalAmp Affected CDMA; GSM Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:calamp:lmu_3030_obd-ii_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | CalAmp |
| cpe:2.3:h:calamp:lmu_3030_obd-ii:-:*:*:*:*:*:*:* | not specified by NVD | Running on | CalAmp |
| cpe:2.3:o:calamp:lmu_3030_cdma_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | CalAmp |
| cpe:2.3:h:calamp:lmu_3030_cdma:-:*:*:*:*:*:*:* | not specified by NVD | Running on | CalAmp |
| cpe:2.3:o:calamp:lmu_3030_gsm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | CalAmp |
| cpe:2.3:h:calamp:lmu_3030_gsm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | CalAmp |
- cpe:2.3:o:calamp:lmu_3030_obd-ii_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·CalAmp
- cpe:2.3:h:calamp:lmu_3030_obd-ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·CalAmp
- cpe:2.3:o:calamp:lmu_3030_cdma_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·CalAmp
- cpe:2.3:h:calamp:lmu_3030_cdma:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·CalAmp
- cpe:2.3:o:calamp:lmu_3030_gsm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·CalAmp
- cpe:2.3:h:calamp:lmu_3030_gsm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·CalAmp
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-3217
- 2026-10-03 Alias added: GHSA-gj9r-4hg5-ccw4
References
Advisory 1
Sources
- CVE-2017-3217 · CVE Program
- CVE-2017-3217 · NVD
- FIRST EPSS
- GHSA-gj9r-4hg5-ccw4 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences