Unauthenticated Access to Internal Diagnostic Interface
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| WAGO | 0765-110x/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-120x/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-150x/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-2101/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-2102/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-410x/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-420x/0100-0000 | unaffected |
|
||||||
| WAGO | 0765-450x/0100-0000 | unaffected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Wago | 0765-110x/0100-0000 |
|
||||||||
| Wago | 0765-120x/0100-0000 |
|
||||||||
| Wago | 0765-150x/0100-0000 |
|
||||||||
| Wago | 0765-2101/0100-0000 |
|
||||||||
| Wago | 0765-2102/0100-0000 |
|
||||||||
| Wago | 0765-410x/0100-0000 |
|
||||||||
| Wago | 0765-420x/0100-0000 |
|
||||||||
| Wago | 0765-450x/0100-0000 |
|
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.757% probability within 30 days)
| Link | Providers |
|---|---|
| https://www.certvde.com/en/advisories/VDE-2026-031/ |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Wago 0765-110x/0100-0000
Wago 0765-120x/0100-0000 Wago 0765-150x/0100-0000 Wago 0765-2101/0100-0000 Wago 0765-2102/0100-0000 Wago 0765-410x/0100-0000 Wago 0765-420x/0100-0000 Wago 0765-450x/0100-0000 |
|
| Vendors & Products |
Wago 0765-110x/0100-0000
Wago 0765-120x/0100-0000 Wago 0765-150x/0100-0000 Wago 0765-2101/0100-0000 Wago 0765-2102/0100-0000 Wago 0765-410x/0100-0000 Wago 0765-420x/0100-0000 Wago 0765-450x/0100-0000 |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise. | |
| Title | Unauthenticated Access to Internal Diagnostic Interface | |
| First Time appeared |
Wago
Wago field Profinet |
|
| Weaknesses | CWE-912 | |
| CPEs | cpe:2.3:o:wago:field_profinet:*:*:*:*:*:*:*:* cpe:2.3:o:wago:field_profinet:1.2.1.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Wago
Wago field Profinet |
|
| References |
| |
| Metrics |
cvssV3_1
|