CVE-2026-3587 - Hidden CLI Function Allows Root Access

Back Back to CVE browser

CRITICAL

Hidden CLI Function Allows Root Access

Published Mar 23, 2026

10.0

CRITICAL

CVSS 3.1

EPSS 0.65%

Description

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

Affected products

Vendor WAGO Product Industrial Managed Switch 852-1305 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.0.S0
Vendor WAGO Product Industrial Managed Switch 852-1305-000-001 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.0.S0
Vendor WAGO Product Industrial Managed Switch 852-1505 Default
unaffected
Affected
- ≥ 0.0.0, < V1.1.9.S0
Vendor WAGO Product Industrial Managed Switch 852-1505-000-001 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.0.S0
Vendor WAGO Product Industrial Managed Switch 852-1605 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.5.S0
Vendor WAGO Product Industrial Managed Switch 852-303 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.8.S0
Vendor WAGO Product Industrial Managed Switch 852-602 Default
unaffected
Affected
- ≥ 0.0.0, < V1.0.6.S0
Vendor WAGO Product Industrial Managed Switch 852-603 Default
unaffected
Affected
- ≥ 0.0.0, < V1.0.6.S0
Vendor WAGO Product Lean Managed Switch 852-1812 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1812-010-000 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1813 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1813-000-001 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.3.S0
Vendor WAGO Product Lean Managed Switch 852-1813-010-000 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1813/010-001 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1816 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0
Vendor WAGO Product Lean Managed Switch 852-1816-010-000 Default
unaffected
Affected
- ≥ 0.0.0, < V1.2.1.S0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
WAGO	Industrial Managed Switch 852-1305	unaffected	Affected ≥ 0.0.0, < V1.2.0.S0
WAGO	Industrial Managed Switch 852-1305-000-001	unaffected	Affected ≥ 0.0.0, < V1.2.0.S0
WAGO	Industrial Managed Switch 852-1505	unaffected	Affected ≥ 0.0.0, < V1.1.9.S0
WAGO	Industrial Managed Switch 852-1505-000-001	unaffected	Affected ≥ 0.0.0, < V1.2.0.S0
WAGO	Industrial Managed Switch 852-1605	unaffected	Affected ≥ 0.0.0, < V1.2.5.S0
WAGO	Industrial Managed Switch 852-303	unaffected	Affected ≥ 0.0.0, < V1.2.8.S0
WAGO	Industrial Managed Switch 852-602	unaffected	Affected ≥ 0.0.0, < V1.0.6.S0
WAGO	Industrial Managed Switch 852-603	unaffected	Affected ≥ 0.0.0, < V1.0.6.S0
WAGO	Lean Managed Switch 852-1812	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1812-010-000	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1813	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1813-000-001	unaffected	Affected ≥ 0.0.0, < V1.2.3.S0
WAGO	Lean Managed Switch 852-1813-010-000	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1813/010-001	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1816	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0
WAGO	Lean Managed Switch 852-1816-010-000	unaffected	Affected ≥ 0.0.0, < V1.2.1.S0