Description
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| WAGO | 0765-110x/0100-0000 | >= 1.0.0.0, < 1.2.1.100 |
| WAGO | 0765-120x/0100-0000 | >= 1.0.0.0, < 1.2.7.100 |
| WAGO | 0765-150x/0100-0000 | >= 1.0.0.0, < 1.2.7.103 |
| WAGO | 0765-2101/0100-0000 | >= 1.0.0.0, < 1.2.1.102 |
| WAGO | 0765-2102/0100-0000 | >= 1.0.0.0, < 1.2.5.101 |
| WAGO | 0765-410x/0100-0000 | >= 1.0.0.0, < 1.2.1.100 |
| WAGO | 0765-420x/0100-0000 | >= 1.0.0.0, < 1.2.7.100 |
| WAGO | 0765-450x/0100-0000 | >= 1.0.0.0, < 1.2.7.103 |
References
Timeline
- Published
- Jul 13, 2026
- Last modified
- Jul 13, 2026
- NVD status
- Awaiting Analysis