CVE-2017-5242 Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key
Identical SSH host keys in Rapid7 Nexpose and InsightVM virtual appliances allow attackers to bypass SSH host verification and potentially intercept traffic.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-5242?
CVE-2017-5242 is a high-severity vulnerability in Rapid7 InsightVM Virtual Appliance, published on 12 Jan 2023. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.
Which versions are affected by CVE-2017-5242?
It affects 1 product.
Products include Rapid7 Insightvm.
How do I fix CVE-2017-5242?
No fix has been published for CVE-2017-5242 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-5242 being exploited?
There is no known exploitation of CVE-2017-5242 in the wild and no public exploit code.
Other vulnerabilities in Rapid7 InsightVM Virtual Appliance
- CVE-2021-3844 Rapid7 InsightVM Insufficient Session Expiration
- CVE-2022-4261 Rapid7 Nexpose Update Validation Issue
- CVE-2024-6504 Rapid7 InsightVM Protection Mechanism Failure
- CVE-2023-0681 Rapid7 Nexpose Uncontrolled URL Redirect
- CVE-2024-2745 Rapid7 InsightVM Sensitive Information Exposure via URL
Sources
Also known as GHSA-w5c5-f46c-8j6x.