CVE-2017-5242

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.

Metrics

CVSS 3.1 7.7/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Weakness enumeration

CWE-321 CWE-330

Affected software

Vendor	Product	Versions
Rapid7	Nexpose Virtual Appliance	>= 2017.04.05, < 2017.04.05*; >= 2017.05.03, <= 2017.05.03
Rapid7	InsightVM Virtual Appliance	>= 2017.04.05, < 2017.04.05*; >= 2017.05.03, <= 2017.05.03

References

https://www.rapid7.com/blog/post/2017/05/17/rapid7-nexpose-virtual-appliance-duplicate-ssh-host-key-cve-2017-5242/Mitigation, Vendor Advisory
https://www.rapid7.com/blog/post/2017/05/17/rapid7-nexpose-virtual-appliance-duplicate-ssh-host-key-cve-2017-5242/Mitigation, Vendor Advisory

Timeline

Published: Jan 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-52438.5The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exc CVE-2017-52443.5Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST requests should have been CVE-2017-52464.3Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated user can populate th CVE-2017-52475.4Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload o CVE-2017-52499.8In version 6.1.0.19 and prior of Wink Labs's Wink - Smart Home Android app, the OAuth token used by the app to authorize user access is not CVE-2017-52509.8In version 1.9.7 and prior of Insteon's Insteon for Hub Android app, the OAuth token used by the app to authorize user access is not stored CVE-2017-52518.1In version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for communication between the hub and connected devices are CVE-2017-52548.8In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of chang CVE-2017-52558.8In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console CVE-2017-52565.4In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Device Name and System De CVE-2017-52575.4In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) community string can CVE-2017-52585.4In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string can provide a URL for