This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2017-5243 | BDVDB-2026-86141 Detail

Rapid7Nexpose hardware appliance

Description#

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installations vulnerable to a range of MITM, downgrade, and decryption attacks.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-327 (Use of a Broken or Risky Cryptographic Algorithm)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.