CVE-2017-5242: RAPID7 Insightvm

High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host keys. Normally, a unique SSH host key should be generated the first time a virtual appliance boots.

Affected products

• RAPID7 Insightvm: from 2017-04-05, up to and including 2017-05-03

Published 2023-01-12. Last modified 2026-06-17.