CVE-2026-4769
CRITICALWAGO 0765-110x/0100-0000 - Unauthenticated Access to Internal Diagnostic Interface
Title source: ruleDescription
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
References (1)
Core 1
Core References
Scores
CVSS v3
9.8
EPSS
0.0045
EPSS Percentile
36.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-912
Status
published
Products (8)
WAGO/0765-110x/0100-0000
1.0.0.0 - 1.2.1.100
WAGO/0765-120x/0100-0000
1.0.0.0 - 1.2.7.100
WAGO/0765-150x/0100-0000
1.0.0.0 - 1.2.7.103
WAGO/0765-2101/0100-0000
1.0.0.0 - 1.2.1.102
WAGO/0765-2102/0100-0000
1.0.0.0 - 1.2.5.101
WAGO/0765-410x/0100-0000
1.0.0.0 - 1.2.1.100
WAGO/0765-420x/0100-0000
1.0.0.0 - 1.2.7.100
WAGO/0765-450x/0100-0000
1.0.0.0 - 1.2.7.103
Published
Jul 13, 2026
Tracked Since
Jul 13, 2026