CVE-2017-5243 Weak cryptography in Nexpose hardware appliance

What is CVE-2017-5243?

CVE-2017-5243 is a high-severity vulnerability in Rapid7 Nexpose hardware appliance, published on 6 Jun 2017. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks.

Weakness: CWE-327

Which versions are affected by CVE-2017-5243?

It affects 1 product.

Products include Rapid7 Nexpose.

How do I fix CVE-2017-5243?

No fix has been published for CVE-2017-5243 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-5243 being exploited?

There is no known exploitation of CVE-2017-5243 in the wild and no public exploit code.

Other vulnerabilities in Rapid7 Nexpose hardware appliance

• CVE-2017-5264 Cross-site request forgery in Nexpose High 8.8
• CVE-2019-5638 Rapid7 Nexpose Insufficient Session Management High 8.7
• CVE-2017-5232 Other in Nexpose High 7.8
• CVE-2017-5230 Hardcoded credentials in Nexpose High 7.2
• CVE-2020-7382 Unquoted Path in Rapid7 Nexpose Installer Medium 6.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-p52h-rp33-x9gq.