CVE Feed

    Dashboard / CVE / CVE-2026-3587

    CVE-2026-3587

    An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

    Published:Mar 23, 2026
    Last Modified:Mar 25, 2026
    EPS:Mar 23, 2026
    EPSS Score:0.0009
    CVSS Score:10

    Affected Products

    Vendor
    Wago
    Product
    Industrial Managed Switch 852-1305
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-1305-000-001
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-1505
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-1505-000-001
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-1605
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-303
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-602
    Vendor
    Wago
    Product
    Industrial Managed Switch 852-603
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1812
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1812-010-000
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1813
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1813-000-001
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1813-010-000
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1813/010-001
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1816
    Vendor
    Wago
    Product
    Lean Managed Switch 852-1816-010-000

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-912 Hidden Functionality

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High