CVE-2017-5243
Last modified
CVE-2017-5243 is a vulnerability of currently unknown severity. The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks.. EPSS estimates a 0.51% chance of exploitation in the next 30 days.
Description
The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Rapid7 | Nexpose | <= 6.4.40 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-5243?
How severe is CVE-2017-5243?
How do I fix CVE-2017-5243?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-5237Due to a lack of authentication, an unauthenticated user who…
- CVE-2017-5238Due to a lack of bounds checking, several input configuratio…
- CVE-2017-5239Due to a lack of standard encryption when transmitting sensi…
- CVE-2017-5240Editions of Rapid7 AppSpider Pro prior to version 6.14.060 c…
- CVE-2017-5241Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024…
- CVE-2017-5242Nexpose and InsightVM virtual appliances downloaded between …7.7
- CVE-2017-5244Routes used to stop running Metasploit tasks (either particu…
- CVE-2017-5245Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-5246Biscom Secure File Transfer is vulnerable to AngularJS expre…
- CVE-2017-5247Biscom Secure File Transfer is vulnerable to cross-site scri…
- CVE-2017-5249In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Ho…
- CVE-2017-5250In version 1.9.7 and prior of Insteon's Insteon for Hub Andr…
Are you affected by CVE-2017-5243?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST