Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key

CVE-2017-5242

What is CVE-2017-5242?

The Nexpose and InsightVM virtual appliances, when downloaded within a specific timeframe in 2017, are affected by a significant security issue where identical SSH host keys are generated. This is contrary to standard practice, where each virtual appliance should have a unique SSH host key upon its first boot. The presence of duplicate SSH host keys can expose the appliances to risks such as man-in-the-middle attacks, as malicious actors may exploit the predictable nature of these keys. It is crucial for users of the affected products to immediately take corrective actions to ensure secure and unique key management.

References