ICSA-26-085-01
Vulnerability from csaf_cisa - Published: 2026-03-23 08:00 - Updated: 2026-03-26 06:00Summary
WAGO GmbH & Co. KG Industrial Managed Switches
Severity
Critical
Notes
Summary: A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.
Impact: This could lead to a full System compromise of the affected devices.
Remediation: Please update your devices to the specified fixed firmware version.
| Product | Fixed Version |
|-------------------------------------------|---------------|
| Lean Managed Switch 852-1812 | V1.2.1.S1 |
| Lean Managed Switch 852-1813 | V1.2.1.S1 |
| Lean Managed Switch 852-1813/000-001| V1.2.3.S1 |
| Lean Managed Switch 852-1816 | V1.2.1.S1 |
| Industrial Managed Switch 852-303 | V1.2.8.S1 |
| Industrial Managed Switch 852-1305 | V1.2.0.S1 |
| Industrial Managed Switch 852-1305/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505 | V1.1.9.S1 |
| Industrial Managed Switch 852-602 | V1.0.6.S1 |
| Industrial Managed Switch 852-603 | V1.0.6.S1 |
| Industrial Managed Switch 852-1605 | V1.2.5.S1 |
| Lean Managed Switch 852-1812/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-001| V1.2.1.S1 |
| Lean Managed Switch 852-1816/010-000| V1.2.1.S1 |
Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).
Advisory Conversion Disclaimer: This ICSA is a verbatim republication of WAGO GmbH & Co. KG VDE-2026-020 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact WAGO GmbH & Co. KG directly for any questions regarding this advisory.
Critical infrastructure sectors: Commercial Facilities, Critical Manufacturing, Energy, Transportation Systems
Countries/areas deployed: Worldwide
Company headquarters location: Germany
Recommended Practices: CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.
Recommended Practices: Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices: Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.
10 (Critical)
Vendor Fix
Please update your devices to the specified fixed firmware version.
| Product | Fixed Version |
|-------------------------------------------|---------------|
| Lean Managed Switch 852-1812 | V1.2.1.S1 |
| Lean Managed Switch 852-1813 | V1.2.1.S1 |
| Lean Managed Switch 852-1813/000-001| V1.2.3.S1 |
| Lean Managed Switch 852-1816 | V1.2.1.S1 |
| Industrial Managed Switch 852-303 | V1.2.8.S1 |
| Industrial Managed Switch 852-1305 | V1.2.0.S1 |
| Industrial Managed Switch 852-1305/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505/000-001| V1.2.0.S1 |
| Industrial Managed Switch 852-1505 | V1.1.9.S1 |
| Industrial Managed Switch 852-602 | V1.0.6.S1 |
| Industrial Managed Switch 852-603 | V1.0.6.S1 |
| Industrial Managed Switch 852-1605 | V1.2.5.S1 |
| Lean Managed Switch 852-1812/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-000| V1.2.1.S1 |
| Lean Managed Switch 852-1813/010-001| V1.2.1.S1 |
| Lean Managed Switch 852-1816/010-000| V1.2.1.S1 |
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0039 | — | ||
| Unresolved product id: CSAFPID-0041 | — | ||
| Unresolved product id: CSAFPID-0043 | — | ||
| Unresolved product id: CSAFPID-0045 | — | ||
| Unresolved product id: CSAFPID-0047 | — | ||
| Unresolved product id: CSAFPID-0049 | — | ||
| Unresolved product id: CSAFPID-0051 | — | ||
| Unresolved product id: CSAFPID-0053 | — | ||
| Unresolved product id: CSAFPID-0055 | — | ||
| Unresolved product id: CSAFPID-0057 | — | ||
| Unresolved product id: CSAFPID-0059 | — | ||
| Unresolved product id: CSAFPID-0061 | — | ||
| Unresolved product id: CSAFPID-0063 | — | ||
| Unresolved product id: CSAFPID-0065 | — | ||
| Unresolved product id: CSAFPID-0067 | — | ||
| Unresolved product id: CSAFPID-0083 | — |
Known affected
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: CSAFPID-0038 | — | ||
| Unresolved product id: CSAFPID-0040 | — | ||
| Unresolved product id: CSAFPID-0042 | — | ||
| Unresolved product id: CSAFPID-0044 | — | ||
| Unresolved product id: CSAFPID-0046 | — | ||
| Unresolved product id: CSAFPID-0048 | — | ||
| Unresolved product id: CSAFPID-0050 | — | ||
| Unresolved product id: CSAFPID-0052 | — | ||
| Unresolved product id: CSAFPID-0054 | — | ||
| Unresolved product id: CSAFPID-0056 | — | ||
| Unresolved product id: CSAFPID-0058 | — | ||
| Unresolved product id: CSAFPID-0060 | — | ||
| Unresolved product id: CSAFPID-0062 | — | ||
| Unresolved product id: CSAFPID-0064 | — | ||
| Unresolved product id: CSAFPID-0066 | — | ||
| Unresolved product id: CSAFPID-0068 | — | ||
| Unresolved product id: CSAFPID-0069 | — | ||
| Unresolved product id: CSAFPID-0070 | — | ||
| Unresolved product id: CSAFPID-0071 | — | ||
| Unresolved product id: CSAFPID-0072 | — | ||
| Unresolved product id: CSAFPID-0073 | — | ||
| Unresolved product id: CSAFPID-0074 | — | ||
| Unresolved product id: CSAFPID-0075 | — | ||
| Unresolved product id: CSAFPID-0076 | — | ||
| Unresolved product id: CSAFPID-0077 | — | ||
| Unresolved product id: CSAFPID-0078 | — | ||
| Unresolved product id: CSAFPID-0079 | — | ||
| Unresolved product id: CSAFPID-0080 | — | ||
| Unresolved product id: CSAFPID-0081 | — | ||
| Unresolved product id: CSAFPID-0082 | — | ||
| Unresolved product id: CSAFPID-0084 | — | ||
| Unresolved product id: CSAFPID-0085 | — |
References
15 references
{
"document": {
"acknowledgments": [
{
"organization": "CERT@VDE coordination",
"summary": "reported this vulnerability to CISA."
}
],
"aggregate_severity": {
"namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
}
},
"lang": "en-GB",
"notes": [
{
"category": "summary",
"text": "A vulnerability has been found affecting the Managed Switches of WAGO. An unauthenticated attacker can fully compromise the device via an undocumented function.",
"title": "Summary"
},
{
"category": "description",
"text": "This could lead to a full System compromise of the affected devices.",
"title": "Impact"
},
{
"category": "description",
"text": "Please update your devices to the specified fixed firmware version.\n\n| Product | Fixed Version |\n|-------------------------------------------|---------------|\n| Lean Managed Switch 852-1812 | V1.2.1.S1 |\n| Lean Managed Switch 852-1813 | V1.2.1.S1 |\n| Lean Managed Switch 852-1813/000-001| V1.2.3.S1 |\n| Lean Managed Switch 852-1816 | V1.2.1.S1 |\n| Industrial Managed Switch 852-303 | V1.2.8.S1 |\n| Industrial Managed Switch 852-1305 | V1.2.0.S1 |\n| Industrial Managed Switch 852-1305/000-001| V1.2.0.S1 |\n| Industrial Managed Switch 852-1505/000-001| V1.2.0.S1 |\n| Industrial Managed Switch 852-1505 | V1.1.9.S1 |\n| Industrial Managed Switch 852-602 | V1.0.6.S1 |\n| Industrial Managed Switch 852-603 | V1.0.6.S1 |\n| Industrial Managed Switch 852-1605 | V1.2.5.S1 |\n| Lean Managed Switch 852-1812/010-000| V1.2.1.S1 |\n| Lean Managed Switch 852-1813/010-000| V1.2.1.S1 |\n| Lean Managed Switch 852-1813/010-001| V1.2.1.S1 |\n| Lean Managed Switch 852-1816/010-000| V1.2.1.S1 |",
"title": "Remediation"
},
{
"category": "legal_disclaimer",
"text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
"title": "Legal Notice and Terms of Use"
},
{
"category": "other",
"text": "This ICSA is a verbatim republication of WAGO GmbH \u0026 Co. KG VDE-2026-020 from a direct conversion of the vendor\u0027s Common Security Advisory Framework (CSAF) advisory. This is republished to CISA\u0027s website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact WAGO GmbH \u0026 Co. KG directly for any questions regarding this advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Commercial Facilities, Critical Manufacturing, Energy, Transportation Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "VDE-2026-020: WAGO: Vulnerability in managed switches - CSAF",
"url": "https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-020.json"
},
{
"category": "external",
"summary": "CERT@VDE Security Advisories for WAGO",
"url": "https://certvde.com/de/advisories/vendor/wago/"
},
{
"category": "self",
"summary": "VDE-2026-020: WAGO: Vulnerability in managed switches - HTML",
"url": "https://certvde.com/en/advisories/VDE-2026-020"
},
{
"category": "self",
"summary": "WAGO PSIRT",
"url": "https://www.wago.com/de-en/automation-technology/psirt"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-26-085-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-085-01.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-26-085-01 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-085-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
}
],
"title": "WAGO GmbH \u0026 Co. KG Industrial Managed Switches",
"tracking": {
"aliases": [
"VDE-2026-020"
],
"current_release_date": "2026-03-26T06:00:00.000000Z",
"generator": {
"date": "2026-03-24T12:39:25.172607Z",
"engine": {
"name": "CISA CSAF Generator",
"version": "1.5.0"
}
},
"id": "ICSA-26-085-01",
"initial_release_date": "2026-03-23T08:00:00.000000Z",
"revision_history": [
{
"date": "2026-03-23T08:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "Release version."
},
{
"date": "2026-03-26T06:00:00.000000Z",
"legacy_version": "CISA Republication",
"number": "2",
"summary": "Initial CISA Republication of WAGO GmbH \u0026 Co. KG VDE-2026-020 advisory"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "852-1812",
"product": {
"name": "Lean Managed Switch 852-1812",
"product_id": "CSAFPID-0001",
"product_identification_helper": {
"model_numbers": [
"852-1812"
]
}
}
},
{
"category": "product_name",
"name": "852-1813",
"product": {
"name": "Lean Managed Switch 852-1813",
"product_id": "CSAFPID-0002",
"product_identification_helper": {
"model_numbers": [
"852-1813"
]
}
}
},
{
"category": "product_name",
"name": "852-1813/000-001",
"product": {
"name": "Lean Managed Switch 852-1813/000-001",
"product_id": "CSAFPID-0003",
"product_identification_helper": {
"model_numbers": [
"852-1813/000-001"
]
}
}
},
{
"category": "product_name",
"name": "852-1816",
"product": {
"name": "Lean Managed Switch 852-1816",
"product_id": "CSAFPID-0004",
"product_identification_helper": {
"model_numbers": [
"852-1816"
]
}
}
},
{
"category": "product_name",
"name": "852-303",
"product": {
"name": "Industrial Managed Switch 852-303",
"product_id": "CSAFPID-0005",
"product_identification_helper": {
"model_numbers": [
"852-303"
]
}
}
},
{
"category": "product_name",
"name": "852-1305",
"product": {
"name": "Industrial Managed Switch 852-1305",
"product_id": "CSAFPID-0006",
"product_identification_helper": {
"model_numbers": [
"852-1305"
]
}
}
},
{
"category": "product_name",
"name": "852-1305/000-001",
"product": {
"name": "Industrial Managed Switch 852-1305/000-001",
"product_id": "CSAFPID-0007",
"product_identification_helper": {
"model_numbers": [
"852-1305/000-001"
]
}
}
},
{
"category": "product_name",
"name": "852-1505/000-001",
"product": {
"name": "Industrial Managed Switch 852-1505/000-001",
"product_id": "CSAFPID-0008",
"product_identification_helper": {
"model_numbers": [
"852-1505/000-001"
]
}
}
},
{
"category": "product_name",
"name": "852-1505",
"product": {
"name": "Industrial Managed Switch 852-1505",
"product_id": "CSAFPID-0009",
"product_identification_helper": {
"model_numbers": [
"852-1505"
]
}
}
},
{
"category": "product_name",
"name": "852-602",
"product": {
"name": "Industrial Managed Switch 852-602",
"product_id": "CSAFPID-0010",
"product_identification_helper": {
"model_numbers": [
"852-602"
]
}
}
},
{
"category": "product_name",
"name": "852-603",
"product": {
"name": "Industrial Managed Switch 852-603",
"product_id": "CSAFPID-0011",
"product_identification_helper": {
"model_numbers": [
"852-603"
]
}
}
},
{
"category": "product_name",
"name": "852-1605",
"product": {
"name": "Industrial Managed Switch 852-1605",
"product_id": "CSAFPID-0012",
"product_identification_helper": {
"model_numbers": [
"852-1605"
]
}
}
},
{
"category": "product_name",
"name": "852-1812/010-000",
"product": {
"name": "Lean Managed Switch 852-1812/010-000",
"product_id": "CSAFPID-0013",
"product_identification_helper": {
"model_numbers": [
"852-1812/010-000"
]
}
}
},
{
"category": "product_name",
"name": "852-1813/010-000",
"product": {
"name": "Lean Managed Switch 852-1813/010-000",
"product_id": "CSAFPID-0014",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-000"
]
}
}
},
{
"category": "product_name",
"name": "852-1816/010-000",
"product": {
"name": "Lean Managed Switch 852-1816/010-000",
"product_id": "CSAFPID-0015",
"product_identification_helper": {
"model_numbers": [
"852-1816/010-000"
]
}
}
},
{
"category": "product_name",
"name": "852-1813/010-001",
"product": {
"name": "Lean Managed Switch 852-1813/010-001",
"product_id": "CSAFPID-0016",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-001"
]
}
}
}
],
"category": "product_family",
"name": "Industrial Managed Switch"
}
],
"category": "product_family",
"name": "Hardware"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.0.6.S0",
"product": {
"name": "Firmware \u003cV1.0.6.S0",
"product_id": "CSAFPID-0017"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.1.9.S0",
"product": {
"name": "Firmware \u003cV1.1.9.S0",
"product_id": "CSAFPID-0018"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.2.0.S0",
"product": {
"name": "Firmware \u003cV1.2.0.S0",
"product_id": "CSAFPID-0019"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.2.1.S0",
"product": {
"name": "Firmware \u003cV1.2.1.S0",
"product_id": "CSAFPID-0020"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.2.3.S0",
"product": {
"name": "Firmware \u003cV1.2.3.S0",
"product_id": "CSAFPID-0021"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.2.5.S0",
"product": {
"name": "Firmware \u003cV1.2.5.S0",
"product_id": "CSAFPID-0022"
}
},
{
"category": "product_version_range",
"name": "vers:generic/\u003cV1.2.8.S0",
"product": {
"name": "Firmware \u003cV1.2.8.S0",
"product_id": "CSAFPID-0023"
}
},
{
"category": "product_version",
"name": "V1.0.6.S1",
"product": {
"name": "Firmware V1.0.6.S1",
"product_id": "CSAFPID-0024",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.0.6.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.1.9.S1",
"product": {
"name": "Firmware V1.1.9.S1",
"product_id": "CSAFPID-0025",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.1.9.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.0.S1",
"product": {
"name": "Firmware V1.2.0.S1",
"product_id": "CSAFPID-0026",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.0.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.1.S1",
"product": {
"name": "Firmware V1.2.1.S1",
"product_id": "CSAFPID-0027",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.3.S1",
"product": {
"name": "Firmware V1.2.3.S1",
"product_id": "CSAFPID-0028",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.3.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.5.S1",
"product": {
"name": "Firmware V1.2.5.S1",
"product_id": "CSAFPID-0029",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.5.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.8.S1",
"product": {
"name": "Firmware V1.2.8.S1",
"product_id": "CSAFPID-0030",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.8.S1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.0.6.S0",
"product": {
"name": "Firmware V1.0.6.S0",
"product_id": "CSAFPID-0031",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.0.6.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.1.9.S0",
"product": {
"name": "Firmware V1.1.9.S0",
"product_id": "CSAFPID-0032",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.1.9.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.0.S0",
"product": {
"name": "Firmware V1.2.0.S0",
"product_id": "CSAFPID-0033",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.0.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.1.S0",
"product": {
"name": "Firmware V1.2.1.S0",
"product_id": "CSAFPID-0034",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.3.S0",
"product": {
"name": "Firmware V1.2.3.S0",
"product_id": "CSAFPID-0035",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.3.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.5.S0",
"product": {
"name": "Firmware V1.2.5.S0",
"product_id": "CSAFPID-0036",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.5.S0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version",
"name": "V1.2.8.S0",
"product": {
"name": "Firmware V1.2.8.S0",
"product_id": "CSAFPID-0037",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.8.S0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_family",
"name": "Firmware"
}
],
"category": "vendor",
"name": "WAGO"
}
],
"product_groups": [
{
"group_id": "CSAFGID-0001",
"product_ids": [
"CSAFPID-0038",
"CSAFPID-0040",
"CSAFPID-0042",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0054",
"CSAFPID-0056",
"CSAFPID-0058",
"CSAFPID-0060",
"CSAFPID-0062",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0072",
"CSAFPID-0073",
"CSAFPID-0074",
"CSAFPID-0075",
"CSAFPID-0076",
"CSAFPID-0077",
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0082",
"CSAFPID-0084",
"CSAFPID-0085"
],
"summary": "Affected products"
},
{
"group_id": "CSAFGID-0002",
"product_ids": [
"CSAFPID-0039",
"CSAFPID-0041",
"CSAFPID-0043",
"CSAFPID-0045",
"CSAFPID-0047",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0053",
"CSAFPID-0055",
"CSAFPID-0057",
"CSAFPID-0059",
"CSAFPID-0061",
"CSAFPID-0063",
"CSAFPID-0065",
"CSAFPID-0067",
"CSAFPID-0083"
],
"summary": "Fixed products"
}
],
"relationships": [
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1812",
"product_id": "CSAFPID-0038",
"product_identification_helper": {
"model_numbers": [
"852-1812"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1812",
"product_id": "CSAFPID-0039",
"product_identification_helper": {
"model_numbers": [
"852-1812"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1813",
"product_id": "CSAFPID-0040",
"product_identification_helper": {
"model_numbers": [
"852-1813"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1813",
"product_id": "CSAFPID-0041",
"product_identification_helper": {
"model_numbers": [
"852-1813"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.3.S0 installed on Lean Managed Switch 852-1813/000-001",
"product_id": "CSAFPID-0042",
"product_identification_helper": {
"model_numbers": [
"852-1813/000-001"
]
}
},
"product_reference": "CSAFPID-0021",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.3.S1 installed on Lean Managed Switch 852-1813/000-001",
"product_id": "CSAFPID-0043",
"product_identification_helper": {
"model_numbers": [
"852-1813/000-001"
]
}
},
"product_reference": "CSAFPID-0028",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1816",
"product_id": "CSAFPID-0044",
"product_identification_helper": {
"model_numbers": [
"852-1816"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1816",
"product_id": "CSAFPID-0045",
"product_identification_helper": {
"model_numbers": [
"852-1816"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.8.S0 installed on Industrial Managed Switch 852-303",
"product_id": "CSAFPID-0046",
"product_identification_helper": {
"model_numbers": [
"852-303"
]
}
},
"product_reference": "CSAFPID-0023",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.8.S1 installed on Industrial Managed Switch 852-303",
"product_id": "CSAFPID-0047",
"product_identification_helper": {
"model_numbers": [
"852-303"
]
}
},
"product_reference": "CSAFPID-0030",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.0.S0 installed on Industrial Managed Switch 852-1305",
"product_id": "CSAFPID-0048",
"product_identification_helper": {
"model_numbers": [
"852-1305"
]
}
},
"product_reference": "CSAFPID-0019",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S1 installed on Industrial Managed Switch 852-1305",
"product_id": "CSAFPID-0049",
"product_identification_helper": {
"model_numbers": [
"852-1305"
]
}
},
"product_reference": "CSAFPID-0026",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.0.S0 installed on Industrial Managed Switch 852-1305/000-001",
"product_id": "CSAFPID-0050",
"product_identification_helper": {
"model_numbers": [
"852-1305/000-001"
]
}
},
"product_reference": "CSAFPID-0019",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S1 installed on Industrial Managed Switch 852-1305/000-001",
"product_id": "CSAFPID-0051",
"product_identification_helper": {
"model_numbers": [
"852-1305/000-001"
]
}
},
"product_reference": "CSAFPID-0026",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.0.S0 installed on Industrial Managed Switch 852-1505/000-001",
"product_id": "CSAFPID-0052",
"product_identification_helper": {
"model_numbers": [
"852-1505/000-001"
]
}
},
"product_reference": "CSAFPID-0019",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S1 installed on Industrial Managed Switch 852-1505/000-001",
"product_id": "CSAFPID-0053",
"product_identification_helper": {
"model_numbers": [
"852-1505/000-001"
]
}
},
"product_reference": "CSAFPID-0026",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.1.9.S0 installed on Industrial Managed Switch 852-1505",
"product_id": "CSAFPID-0054",
"product_identification_helper": {
"model_numbers": [
"852-1505"
]
}
},
"product_reference": "CSAFPID-0018",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.1.9.S1 installed on Industrial Managed Switch 852-1505",
"product_id": "CSAFPID-0055",
"product_identification_helper": {
"model_numbers": [
"852-1505"
]
}
},
"product_reference": "CSAFPID-0025",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.0.6.S0 installed on Industrial Managed Switch 852-602",
"product_id": "CSAFPID-0056",
"product_identification_helper": {
"model_numbers": [
"852-602"
]
}
},
"product_reference": "CSAFPID-0017",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.0.6.S1 installed on Industrial Managed Switch 852-602",
"product_id": "CSAFPID-0057",
"product_identification_helper": {
"model_numbers": [
"852-602"
]
}
},
"product_reference": "CSAFPID-0024",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.0.6.S0 installed on Industrial Managed Switch 852-603",
"product_id": "CSAFPID-0058",
"product_identification_helper": {
"model_numbers": [
"852-603"
]
}
},
"product_reference": "CSAFPID-0017",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.0.6.S1 installed on Industrial Managed Switch 852-603",
"product_id": "CSAFPID-0059",
"product_identification_helper": {
"model_numbers": [
"852-603"
]
}
},
"product_reference": "CSAFPID-0024",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.5.S0 installed on Industrial Managed Switch 852-1605",
"product_id": "CSAFPID-0060",
"product_identification_helper": {
"model_numbers": [
"852-1605"
]
}
},
"product_reference": "CSAFPID-0022",
"relates_to_product_reference": "CSAFPID-0012"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.5.S1 installed on Industrial Managed Switch 852-1605",
"product_id": "CSAFPID-0061",
"product_identification_helper": {
"model_numbers": [
"852-1605"
]
}
},
"product_reference": "CSAFPID-0029",
"relates_to_product_reference": "CSAFPID-0012"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1812/010-000",
"product_id": "CSAFPID-0062",
"product_identification_helper": {
"model_numbers": [
"852-1812/010-000"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0013"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1812/010-000",
"product_id": "CSAFPID-0063",
"product_identification_helper": {
"model_numbers": [
"852-1812/010-000"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0013"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1813/010-000",
"product_id": "CSAFPID-0064",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-000"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0014"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1813/010-000",
"product_id": "CSAFPID-0065",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-000"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0014"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1816/010-000",
"product_id": "CSAFPID-0066",
"product_identification_helper": {
"model_numbers": [
"852-1816/010-000"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0015"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1816/010-000",
"product_id": "CSAFPID-0067",
"product_identification_helper": {
"model_numbers": [
"852-1816/010-000"
]
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0015"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.0.6.S0 installed on Industrial Managed Switch 852-602",
"product_id": "CSAFPID-0068",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.0.6.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0031",
"relates_to_product_reference": "CSAFPID-0010"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.0.6.S0 installed on Industrial Managed Switch 852-603",
"product_id": "CSAFPID-0069",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.0.6.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0031",
"relates_to_product_reference": "CSAFPID-0011"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.1.9.S0 installed on Industrial Managed Switch 852-1505",
"product_id": "CSAFPID-0070",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.1.9.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0032",
"relates_to_product_reference": "CSAFPID-0009"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S0 installed on Industrial Managed Switch 852-1305",
"product_id": "CSAFPID-0071",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.0.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0033",
"relates_to_product_reference": "CSAFPID-0006"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S0 installed on Industrial Managed Switch 852-1305/000-001",
"product_id": "CSAFPID-0072",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.0.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0033",
"relates_to_product_reference": "CSAFPID-0007"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.0.S0 installed on Industrial Managed Switch 852-1505/000-001",
"product_id": "CSAFPID-0073",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.0.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0033",
"relates_to_product_reference": "CSAFPID-0008"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1812",
"product_id": "CSAFPID-0074",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0001"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1813",
"product_id": "CSAFPID-0075",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0002"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1816",
"product_id": "CSAFPID-0076",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0004"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1812/010-000",
"product_id": "CSAFPID-0077",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0013"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1813/010-000",
"product_id": "CSAFPID-0078",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0014"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1816/010-000",
"product_id": "CSAFPID-0079",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0034",
"relates_to_product_reference": "CSAFPID-0015"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.3.S0 installed on Lean Managed Switch 852-1813/000-001",
"product_id": "CSAFPID-0080",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.3.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0035",
"relates_to_product_reference": "CSAFPID-0003"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.5.S0 installed on Industrial Managed Switch 852-1605",
"product_id": "CSAFPID-0081",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.5.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0036",
"relates_to_product_reference": "CSAFPID-0012"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.8.S0 installed on Industrial Managed Switch 852-303",
"product_id": "CSAFPID-0082",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.8.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0037",
"relates_to_product_reference": "CSAFPID-0005"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S1 installed on Lean Managed Switch 852-1813/010-001",
"product_id": "CSAFPID-0083",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-001"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0016"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware \u003cV1.2.1.S0 installed on Lean Managed Switch 852-1813/010-001",
"product_id": "CSAFPID-0084",
"product_identification_helper": {
"model_numbers": [
"852-1813/010-001"
]
}
},
"product_reference": "CSAFPID-0020",
"relates_to_product_reference": "CSAFPID-0016"
},
{
"category": "installed_on",
"full_product_name": {
"name": "Firmware V1.2.1.S0 installed on Lean Managed Switch 852-1813/010-001",
"product_id": "CSAFPID-0085",
"product_identification_helper": {
"cpe": "cpe:2.3:o:wago:switch:V1.2.1.S0:*:*:*:*:*:*:*"
}
},
"product_reference": "CSAFPID-0027",
"relates_to_product_reference": "CSAFPID-0016"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-3587",
"cwe": {
"id": "CWE-912",
"name": "Hidden Functionality"
},
"notes": [
{
"category": "description",
"text": "An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"CSAFPID-0039",
"CSAFPID-0041",
"CSAFPID-0043",
"CSAFPID-0045",
"CSAFPID-0047",
"CSAFPID-0049",
"CSAFPID-0051",
"CSAFPID-0053",
"CSAFPID-0055",
"CSAFPID-0057",
"CSAFPID-0059",
"CSAFPID-0061",
"CSAFPID-0063",
"CSAFPID-0065",
"CSAFPID-0067",
"CSAFPID-0083"
],
"known_affected": [
"CSAFPID-0038",
"CSAFPID-0040",
"CSAFPID-0042",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0054",
"CSAFPID-0056",
"CSAFPID-0058",
"CSAFPID-0060",
"CSAFPID-0062",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0072",
"CSAFPID-0073",
"CSAFPID-0074",
"CSAFPID-0075",
"CSAFPID-0076",
"CSAFPID-0077",
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0082",
"CSAFPID-0084",
"CSAFPID-0085"
]
},
"references": [
{
"category": "external",
"summary": "www.cve.org",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3587"
},
{
"category": "external",
"summary": "cwe.mitre.org",
"url": "https://cwe.mitre.org/data/definitions/912.html"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-09T13:00:00.000000Z",
"details": "Please update your devices to the specified fixed firmware version.\n\n| Product | Fixed Version |\n|-------------------------------------------|---------------|\n| Lean Managed Switch 852-1812 | V1.2.1.S1 |\n| Lean Managed Switch 852-1813 | V1.2.1.S1 |\n| Lean Managed Switch 852-1813/000-001| V1.2.3.S1 |\n| Lean Managed Switch 852-1816 | V1.2.1.S1 |\n| Industrial Managed Switch 852-303 | V1.2.8.S1 |\n| Industrial Managed Switch 852-1305 | V1.2.0.S1 |\n| Industrial Managed Switch 852-1305/000-001| V1.2.0.S1 |\n| Industrial Managed Switch 852-1505/000-001| V1.2.0.S1 |\n| Industrial Managed Switch 852-1505 | V1.1.9.S1 |\n| Industrial Managed Switch 852-602 | V1.0.6.S1 |\n| Industrial Managed Switch 852-603 | V1.0.6.S1 |\n| Industrial Managed Switch 852-1605 | V1.2.5.S1 |\n| Lean Managed Switch 852-1812/010-000| V1.2.1.S1 |\n| Lean Managed Switch 852-1813/010-000| V1.2.1.S1 |\n| Lean Managed Switch 852-1813/010-001| V1.2.1.S1 |\n| Lean Managed Switch 852-1816/010-000| V1.2.1.S1 |",
"group_ids": [
"CSAFGID-0001"
]
},
{
"category": "workaround",
"date": "2026-03-09T13:00:00.000000Z",
"details": "To eliminate the attack vector deactivate ssh and telnet on the device.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0013",
"CSAFPID-0014",
"CSAFPID-0015",
"CSAFPID-0016"
]
},
{
"category": "workaround",
"date": "2026-03-19T11:00:00.000000Z",
"details": "To reduce the attack vector deactivate ssh and telnet on the devices. This ensures that the CLI is only accessible locally via RS232.",
"product_ids": [
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-0010",
"CSAFPID-0011",
"CSAFPID-0012"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"environmentalScore": 10,
"environmentalSeverity": "CRITICAL",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"temporalScore": 10,
"temporalSeverity": "CRITICAL",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-0038",
"CSAFPID-0040",
"CSAFPID-0042",
"CSAFPID-0044",
"CSAFPID-0046",
"CSAFPID-0048",
"CSAFPID-0050",
"CSAFPID-0052",
"CSAFPID-0054",
"CSAFPID-0056",
"CSAFPID-0058",
"CSAFPID-0060",
"CSAFPID-0062",
"CSAFPID-0064",
"CSAFPID-0066",
"CSAFPID-0068",
"CSAFPID-0069",
"CSAFPID-0070",
"CSAFPID-0071",
"CSAFPID-0072",
"CSAFPID-0073",
"CSAFPID-0074",
"CSAFPID-0075",
"CSAFPID-0076",
"CSAFPID-0077",
"CSAFPID-0078",
"CSAFPID-0079",
"CSAFPID-0080",
"CSAFPID-0081",
"CSAFPID-0082",
"CSAFPID-0084",
"CSAFPID-0085"
]
}
],
"title": "Hidden CLI Function Allows Root Access"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…