CVE-2026-4769 | BDVDB-2026-347188 Detail
WAGO0765-110x/0100-0000
Description#
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-912 Hidden Functionality
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.