Log in Start free

Vulnerability · Published Mar 23, 2026 · Assigned by CERTVDE

CVE-2026-3587Hidden CLI Function Allows Root Access

Critical 10.0

In plain English

A critical-severity security flaw in Industrial Managed Switch 852-1305 from WAGO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)0.7%top 47.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

Affected products (as reported)

VendorProductVersions
WAGO Lean Managed Switch 852-1812 0.0.0 – before V1.2.1.S0
WAGO Lean Managed Switch 852-1813 0.0.0 – before V1.2.1.S0
WAGO Lean Managed Switch 852-1813-000-001 0.0.0 – before V1.2.3.S0
WAGO Lean Managed Switch 852-1816 0.0.0 – before V1.2.1.S0
WAGO Industrial Managed Switch 852-303 0.0.0 – before V1.2.8.S0
WAGO Industrial Managed Switch 852-1305 0.0.0 – before V1.2.0.S0
WAGO Industrial Managed Switch 852-1305-000-001 0.0.0 – before V1.2.0.S0
WAGO Industrial Managed Switch 852-1505-000-001 0.0.0 – before V1.2.0.S0
WAGO Industrial Managed Switch 852-1505 0.0.0 – before V1.1.9.S0
WAGO Industrial Managed Switch 852-602 0.0.0 – before V1.0.6.S0
WAGO Industrial Managed Switch 852-603 0.0.0 – before V1.0.6.S0
WAGO Industrial Managed Switch 852-1605 0.0.0 – before V1.2.5.S0
WAGO Lean Managed Switch 852-1812-010-000 0.0.0 – before V1.2.1.S0
WAGO Lean Managed Switch 852-1813-010-000 0.0.0 – before V1.2.1.S0
WAGO Lean Managed Switch 852-1816-010-000 0.0.0 – before V1.2.1.S0
WAGO Lean Managed Switch 852-1813/010-001 0.0.0 – before V1.2.1.S0

Weakness: CWE-912 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References