Description
An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | Lean Managed Switch 852-1812 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Lean Managed Switch 852-1813 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Lean Managed Switch 852-1813-000-001 | 0.0.0 – < V1.2.3.S0 | V1.2.3.S0 |
| WAGO | Lean Managed Switch 852-1816 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Industrial Managed Switch 852-303 | 0.0.0 – < V1.2.8.S0 | V1.2.8.S0 |
| WAGO | Industrial Managed Switch 852-1305 | 0.0.0 – < V1.2.0.S0 | V1.2.0.S0 |
| WAGO | Industrial Managed Switch 852-1305-000-001 | 0.0.0 – < V1.2.0.S0 | V1.2.0.S0 |
| WAGO | Industrial Managed Switch 852-1505-000-001 | 0.0.0 – < V1.2.0.S0 | V1.2.0.S0 |
| WAGO | Industrial Managed Switch 852-1505 | 0.0.0 – < V1.1.9.S0 | V1.1.9.S0 |
| WAGO | Industrial Managed Switch 852-602 | 0.0.0 – < V1.0.6.S0 | V1.0.6.S0 |
| WAGO | Industrial Managed Switch 852-603 | 0.0.0 – < V1.0.6.S0 | V1.0.6.S0 |
| WAGO | Industrial Managed Switch 852-1605 | 0.0.0 – < V1.2.5.S0 | V1.2.5.S0 |
| WAGO | Lean Managed Switch 852-1812-010-000 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Lean Managed Switch 852-1813-010-000 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Lean Managed Switch 852-1816-010-000 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
| WAGO | Lean Managed Switch 852-1813/010-001 | 0.0.0 – < V1.2.1.S0 | V1.2.1.S0 |
Advisories 2
- ICSA-26-085-01 WAGO GmbH & Co. KG Industrial Managed Switches CISA ICS & IT advisories · Mar 26, 2026
- VDE-2026-020 WAGO: Vulnerability in managed switches CERT@VDE · Mar 23, 2026