← CVE Intelligence

CVE-2026-3587

Hidden CLI Function Allows Root Access PUBLISHED

Description (CNA)

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

Affected (CNA)

Vendor / product	Versions
WAGO / Lean Managed Switch 852-1812	affected 0.0.0 before V1.2.1.S0
WAGO / Lean Managed Switch 852-1813	affected 0.0.0 before V1.2.1.S0
WAGO / Lean Managed Switch 852-1813-000-001	affected 0.0.0 before V1.2.3.S0
WAGO / Lean Managed Switch 852-1816	affected 0.0.0 before V1.2.1.S0
WAGO / Industrial Managed Switch 852-303	affected 0.0.0 before V1.2.8.S0
WAGO / Industrial Managed Switch 852-1305	affected 0.0.0 before V1.2.0.S0
WAGO / Industrial Managed Switch 852-1305-000-001	affected 0.0.0 before V1.2.0.S0
WAGO / Industrial Managed Switch 852-1505-000-001	affected 0.0.0 before V1.2.0.S0
WAGO / Industrial Managed Switch 852-1505	affected 0.0.0 before V1.1.9.S0
WAGO / Industrial Managed Switch 852-602	affected 0.0.0 before V1.0.6.S0
WAGO / Industrial Managed Switch 852-603	affected 0.0.0 before V1.0.6.S0
WAGO / Industrial Managed Switch 852-1605	affected 0.0.0 before V1.2.5.S0
WAGO / Lean Managed Switch 852-1812-010-000	affected 0.0.0 before V1.2.1.S0
WAGO / Lean Managed Switch 852-1813-010-000	affected 0.0.0 before V1.2.1.S0
WAGO / Lean Managed Switch 852-1816-010-000	affected 0.0.0 before V1.2.1.S0
WAGO / Lean Managed Switch 852-1813/010-001	affected 0.0.0 before V1.2.1.S0

CWE

CWE-912

References

https://certvde.com/de/advisories/VDE-2026-020

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.