Skip to content
OpenAdvisories
Critical ICSA-26-085-01 1 CVE

WAGO GmbH & Co. KG Industrial Managed Switches

Published Mar 23, 2026 · Updated Mar 26, 2026 · Revision 2

Vendor: WAGO Product: 852-1305 Product: 852-1305/000-001 Product: 852-1505 Product: 852-1505/000-001 Product: 852-1605 Product: 852-1812 Product: 852-1812/010-000 Product: 852-1813 Product: 852-1813/000-001 Product: 852-1813/010-000 Product: 852-1813/010-001 Product: 852-1816 Product: 852-1816/010-000 Product: 852-303 Product: 852-602 Product: 852-603

Summary

A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.

Details

Impact
This could lead to a full System compromise of the affected devices.

Remediation
Please update your devices to the specified fixed firmware version.

| Product | Fixed Version |
|-------------------------------------------|---------------|
| Lean Managed Switch 852-1812 | V1.2.1.S1 |
| Lean Managed Switch 852-1813 | V1.2.1.S1 |
| Lean Managed Switch 852-1813/000-001| V1.2.3.S1 |
| Lean Managed Switch 852-1816 | V1.2.1.S1 |
| Industrial Managed Switch 852-303 | V1.2.8.S1 |
| Industrial Managed Switch 852-1305 | V1.2.0.S1 |
| Industrial Managed Switch 852-1305/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505 | V1.1.9.S1 |
| Industrial Managed Switch 852-602 | V1.0.6.S1 |
| Industrial Managed Switch 852-603 | V1.0.6.S1 |
| Industrial Managed Switch 852-1605 | V1.2.5.S1 |
| Lean Managed Switch 852-1812/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-001| V1.2.1.S1 |
| Lean Managed Switch 852-1816/010-000| V1.2.1.S1 |

Vulnerabilities 1

Revision history

  1. #2

    Initial CISA Republication of WAGO GmbH & Co. KG VDE-2026-020 advisory

  2. #1

    Release version.

References