top of page
perceptive_background_267k.jpg

WAGO GmbH & Co. KG Industrial Managed Switches

Published:

26 March 2026 at 12:00:00

Alert date:

26 March 2026 at 17:02:46

Source:

cisa.gov

Click to open the original link from this advisory

Critical Infrastructure, Network Infrastructure

A critical vulnerability (CVE-2026-3587) with CVSS score 10.0 affects WAGO Industrial Managed Switches across multiple firmware versions. The vulnerability allows unauthenticated remote attackers to exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full device compromise. The flaw impacts critical infrastructure sectors including energy, transportation, and manufacturing. WAGO has released firmware updates to address the vulnerability and recommends disabling SSH/telnet access as a mitigation. No known public exploitation has been reported to CISA at this time.

Technical details

Mitigation steps:

Affected products:

WAGO Industrial Managed Switches

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page