CVE-2026-3587

Hidden CLI Function Allows Root Access

CVSS 10 CRITICALEPSS 0.7%CWE-912

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Productos afectados

WAGO · Industrial Managed Switch 852-1305 WAGO · Industrial Managed Switch 852-1305-000-001 WAGO · Industrial Managed Switch 852-1505 WAGO · Industrial Managed Switch 852-1505-000-001 WAGO · Industrial Managed Switch 852-1605 WAGO · Industrial Managed Switch 852-303 WAGO · Industrial Managed Switch 852-602 WAGO · Industrial Managed Switch 852-603 WAGO · Lean Managed Switch 852-1812 WAGO · Lean Managed Switch 852-1812-010-000 WAGO · Lean Managed Switch 852-1813 WAGO · Lean Managed Switch 852-1813-000-001 WAGO · Lean Managed Switch 852-1813-010-000 WAGO · Lean Managed Switch 852-1813/010-001 WAGO · Lean Managed Switch 852-1816 WAGO · Lean Managed Switch 852-1816-010-000

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://certvde.com/de/advisories/VDE-2026-020