CVE-2026-4769

Unauthenticated Access to Internal Diagnostic Interface

Published Jul 13, 2026 CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Description
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Wago 0765-110x/0100-0000
Wago 0765-120x/0100-0000
Wago 0765-150x/0100-0000
Wago 0765-2101/0100-0000
Wago 0765-2102/0100-0000
Wago 0765-410x/0100-0000
Wago 0765-420x/0100-0000
Wago 0765-450x/0100-0000
Vendors & Products Wago 0765-110x/0100-0000
Wago 0765-120x/0100-0000
Wago 0765-150x/0100-0000
Wago 0765-2101/0100-0000
Wago 0765-2102/0100-0000
Wago 0765-410x/0100-0000
Wago 0765-420x/0100-0000
Wago 0765-450x/0100-0000
Type Values Removed Values Added
Description Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Title Unauthenticated Access to Internal Diagnostic Interface
First Time appeared Wago
Wago field Profinet
Weaknesses CWE-912
CPEs cpe:2.3:o:wago:field_profinet:*:*:*:*:*:*:*:*
cpe:2.3:o:wago:field_profinet:1.2.1.0:*:*:*:*:*:*:*
Vendors & Products Wago
Wago field Profinet
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}