Goal Reached Thanks to every supporter β€” we hit 100%!

Goal: 1000 CNY Β· Raised: 1000 CNY

100.0%

CVE-2026-3587 β€” AI Deep Analysis Summary

CVSS 10.0 Β· Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Hidden CLI features in WAGO Lean Managed Switch allow full device compromise. πŸ’₯ **Consequences**: Total loss of confidentiality, integrity, and availability. Critical severity!

Q2Root Cause? (CWE/Flaw)

πŸ›‘οΈ **Root Cause**: CWE-912 (Hidden Function). The CLI prompt contains undiscovered commands that bypass intended security controls. πŸ•΅οΈβ€β™‚οΈ It's a design flaw exposing backend capabilities.

Q3Who is affected? (Versions/Components)

🏭 **Affected**: WAGO Lean Managed Switch 852-1812. πŸ‡©πŸ‡ͺ Vendor: WAGO. πŸ“… Published: 2026-03-23. Check your specific model number!

Q4What can hackers do? (Privileges/Data)

πŸ’€ **Attacker Impact**: Full root access! πŸ“‰ CVSS Score: 10.0 (Critical). Can read data, modify configs, and crash the system. Complete takeover possible.

Q5Is exploitation threshold high? (Auth/Config)

⚑ **Exploitation**: Low barrier! 🚫 No authentication required (PR:N). Network accessible (AV:N). Easy to trigger via CLI interface. ⚠️ High risk!

Q6Is there a public Exp? (PoC/Wild Exploitation)

πŸ” **Public Exp?**: No PoC currently listed in the data. πŸ“ However, the vulnerability is well-defined. Wild exploitation is likely imminent given the low effort required.

Q7How to self-check? (Features/Scanning)

πŸ”Ž **Self-Check**: Scan for WAGO Lean Managed Switch 852-1812 devices. πŸ“‘ Look for CLI interfaces exposed on the network. Test for hidden command injection if safe.

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Fix Status**: Official advisory available from VDE (VDE-2026-020). πŸ“„ Check vendor website for patches. Update firmware immediately if available.

Q9What if no patch? (Workaround)

🚧 **No Patch?**: Isolate the device! 🚫 Block network access to the CLI port. Restrict management VLANs. Monitor logs for unauthorized access attempts.

Q10Is it urgent? (Priority Suggestion)

πŸ”₯ **Urgency**: CRITICAL! 🚨 CVSS 10.0 + No Auth + Network Access = Immediate Action Required. Patch or isolate NOW to prevent total breach.