Description
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WAGO | 0765-110x/0100-0000 | 1.0.0.0 – < 1.2.1.100 | 1.2.1.100 |
| WAGO | 0765-120x/0100-0000 | 1.0.0.0 – < 1.2.7.100 | 1.2.7.100 |
| WAGO | 0765-150x/0100-0000 | 1.0.0.0 – < 1.2.7.103 | 1.2.7.103 |
| WAGO | 0765-2101/0100-0000 | 1.0.0.0 – < 1.2.1.102 | 1.2.1.102 |
| WAGO | 0765-2102/0100-0000 | 1.0.0.0 – < 1.2.5.101 | 1.2.5.101 |
| WAGO | 0765-410x/0100-0000 | 1.0.0.0 – < 1.2.1.100 | 1.2.1.100 |
| WAGO | 0765-420x/0100-0000 | 1.0.0.0 – < 1.2.7.100 | 1.2.7.100 |
| WAGO | 0765-450x/0100-0000 | 1.0.0.0 – < 1.2.7.103 | 1.2.7.103 |
Advisories 1
- VDE-2026-031 WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices CERT@VDE · Jul 13, 2026