PT-2026-27066 · Wago+1 · Lean Managed Switch 852-1812+2
CVE-2026-3587
·
Publicado
2026-03-23
·
Atualizado
2026-04-21
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WAGO Lean Managed Switch 852-1812 and other WAGO products
versions prior to a fix for CVE-2026-3587
Description
An unauthenticated remote attacker can exploit a hidden function within the Command Line Interface (CLI) prompt to bypass the restricted interface. This allows the attacker to gain root access to the underlying Linux operating system, potentially leading to a full compromise of the device. The issue is described as a critical severity flaw with a CVSS score of 10.0. The vulnerability resides in an undocumented CLI backdoor. There have been reports of elevated activities targeting WAGO devices, indicating potential exploitation in the wild. The vulnerable function allows access to the Linux OS as root.
Recommendations
Update WAGO Lean Managed Switch 852-1812 and other affected WAGO products to a version that addresses CVE-2026-3587.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Hidden Functionality
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux
Lean Managed Switch 852-1812
Wago Products