CVE-2021-37209

CVE-2021-37209 describes a vulnerability in numerous RUGGEDCOM products where the SSH server defaults to offering weak ciphers. This flaw allows a man-in-the-middle attacker to intercept and alter data transmitted between legitimate clients and the affected devices. With a CVSS score of 6.7 (Medium), exploitation requires an adjacent network attacker and user interaction, but could lead to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.