WAGO System I/O Field Devices Early-Boot Diagnostic Exposure Allowing Full System Compromise

A vulnerability exists in certain WAGO System I/O Field devices that allows unauthenticated remote access to internal system processes during a brief window in the early startup phase. This access, which is not documented and available only for a short time, can lead to a full system compromise by exploiting the internal diagnostic capabilities activated at startup.

Impact

Exploitation of this vulnerability could result in a complete compromise of the affected system.

Remediation

Users are advised to update to the latest firmware versions. The specific fixed versions can be found in the WAGO advisory VDE-2026-031.