CVE-2026-3587 | WAGO Lean Managed Switch 852-1816-010-000 010-001 prior V1.2.1.S0 Restricted Interface backdoor (VDE-2026-020)

A vulnerability was found in WAGO Lean Managed Switch 852-1812, Lean Managed Switch 852-1813, Lean Managed Switch 852-1813-000-001, Lean Managed Switch 852-1816, Industrial Managed Switch 852-303, Industrial Managed Switch 852-1305, Industrial Managed Switch 852-1305-000-001, Industrial Managed Switch 852-1505-000-001, Industrial Managed Switch 852-1505, Industrial Managed Switch 852-602, Industrial Managed Switch 852-603, Industrial Managed Switch 852-1605, Lean Managed Switch 852-1812-010-000, Lean Managed Switch 852-1813-010-000 and Lean Managed Switch 852-1816-010-000 010-001. It has been classified as critical. This affects an unknown part of the component Restricted Interface. Performing a manipulation results in backdoor.

This vulnerability is reported as CVE-2026-3587. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.