by Kastro CVE-2026-4769
WAGO 0765-110x/0100-0000 — Unauthenticated Access to Internal Diagnostic Interface
Description · from the CVE record
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Affected
ProductAffectedFixed inSource
0765-110x/0100-00001.0.0.0 – < 1.2.1.1001.2.1.100CNA
0765-120x/0100-00001.0.0.0 – < 1.2.7.1001.2.7.100CNA
0765-150x/0100-00001.0.0.0 – < 1.2.7.1031.2.7.103CNA
0765-2101/0100-00001.0.0.0 – < 1.2.1.1021.2.1.102CNA
0765-2102/0100-00001.0.0.0 – < 1.2.5.1011.2.5.101CNA
0765-410x/0100-00001.0.0.0 – < 1.2.1.1001.2.1.100CNA
0765-420x/0100-00001.0.0.0 – < 1.2.7.1001.2.7.100CNA
0765-450x/0100-00001.0.0.0 – < 1.2.7.1031.2.7.103CNA
Scores by source
CERTVDE (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CERTVDE (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total