CVE-2021-42017

CVE-2021-42017 is a medium-severity vulnerability affecting numerous Siemens RUGGEDCOM products, stemming from a new variant of the POODLE attack. This flaw arises from implementation issues with the CBC encryption mode in TLS 1.0 to 1.2, allowing a man-in-the-middle attacker to eavesdrop on encrypted communications. With a CVSS score of 5.9, exploitation requires high attack complexity but does not necessitate user interaction or privileges. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.