#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

WAGO GmbH & Co. KG Industrial Managed Switches

Cybersecurity and Infrastructure Security Agency CISA·aruschman·7 months ago
#lQ2pBNi0
#cisa#cvss#wago#firmware#strong
Reading 0:00
15s threshold

WAGO GmbH & Co. KG Industrial Managed Switches

aruschman

Mar 26, 2026

Release Date

March 26, 2026

Description

View CSAF

Summary

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

The following versions of WAGO GmbH & Co. KG Industrial Managed Switches are affected:

WAGO Firmware versions prior to V1.2.1.S0 WAGO_Hardware_852-1812 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.1.S0 WAGO_Hardware_852-1813 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.3.S0 WAGO_Hardware_852-1813/000-001 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.1.S0 WAGO_Hardware_852-1816 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.8.S0 WAGO_Hardware_852-303 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.0.S0 WAGO_Hardware_852-1305 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.0.S0 WAGO_Hardware_852-1305/000-001 (CVE-2026-3587)

WAGO Firmware versions prior to V1.2.0.S0…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Create free accountLog in