VDE-2026-031

csafDEwago_psirt

WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices

view advisory published 2026-07-13

Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-4769US——
Certain devices in the WAGO System I/O Field series activate an internal diagnostic capability during the initial startup sequence. This functionality is not formally documented an…
02

references

External citations — patches, advisories, analysis.

03

remediations (1)

  • Fixed

    Update to the listed fixed versions of the affected firmwares: | Fixed Version | Product Name | | ------------- | ------------------------------------ | | 1.2.1.100 | I/O System Field 0765-110x/0100-0000 | | 1.2.7.100 | I/O System Field 0765-120x/0100-0000 | | 1.2.7.103 | I/O System Field 0765-150x/0100-0000 | | 1.2.1.102 | I/O System Field 0765-2101/0100-0000 | | 1.2.5.101 | I/O System Field 0765-2102/0100-0000 | | 1.2.1.100 | I/O System Field 0765-410x/0100-0000 | | 1.2.7.100 | I/O System Field 0765-420x/0100-0000 | | 1.2.7.103 | I/O System Field 0765-450x/0100-0000 |

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan