Vulnerability in SSH Configuration for Rapid7 Nexpose Appliances

CVE-2017-5243

What is CVE-2017-5243?

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped prior to June 2017 lacks the specification of desired algorithms for key exchange and other security functions. This oversight leads to a fallback mechanism allowing all algorithms supported by the corresponding OpenSSH version, thereby increasing vulnerability to various types of attacks, including man-in-the-middle (MITM), downgrade attacks, and decryption exploits. Organizations using affected appliances should review their SSH configurations to mitigate these risks.

References