Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-4769

Unauthenticated Access to Internal Diagnostic Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WAGO 0765-110x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.1.100affected

WAGO 0765-120x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.7.100affected

WAGO 0765-150x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.7.103affected

WAGO 0765-2101/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.1.102affected

WAGO 0765-2102/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.5.101affected

WAGO 0765-410x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.1.100affected

WAGO 0765-420x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.7.100affected

WAGO 0765-450x/0100-0000

Default version status: unaffected

  • 1.0.0.0 to < 1.2.7.103affected

References