CVE-2026-4769: WAGO 0765-110x/0100-0000, верига на доставки

Описание

Оригинално описание

Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented and becomes accessible without authentication for a brief period in the early boot phase. During this window, an unauthenticated remote attacker can gain access to the internal system processes, resulting in full system compromise.

Засегнати продукти

• WAGO 0765-110x/0100-0000: 1.0.0.0 преди 1.2.1.100
• WAGO 0765-120x/0100-0000: 1.0.0.0 преди 1.2.7.100
• WAGO 0765-150x/0100-0000: 1.0.0.0 преди 1.2.7.103
• WAGO 0765-2101/0100-0000: 1.0.0.0 преди 1.2.1.102
• WAGO 0765-2102/0100-0000: 1.0.0.0 преди 1.2.5.101
• WAGO 0765-410x/0100-0000: 1.0.0.0 преди 1.2.1.100
• WAGO 0765-420x/0100-0000: 1.0.0.0 преди 1.2.7.100
• WAGO 0765-450x/0100-0000: 1.0.0.0 преди 1.2.7.103

Вид слабост

• CWE-912 Hidden Functionality

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-4769
• https://nvd.nist.gov/vuln/detail/CVE-2026-4769
• https://www.certvde.com/en/advisories/VDE-2026-031/