VULNERABILITY INTELLIGENCE

CVE-2017-5243

CVSS score8.5 HIGH

EPSS probability0.51%

CISA KEVNot currently listed

Published2017-06-06

Last modified2026-06-17

Description

The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supported by the relevant version of OpenSSH and makes the installati... .