WAGO firmware before 4.10.0 lets low-privileged users change PROFIBUS settings
Web-Based Management fails to enforce permissions, so a remote user can alter root-owned fieldbus parameters.
55
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenSep 2, 2026
- Last mentioned10d ago
Timeline
3 articles · newest first$536 and 8 Hours: AI Learns to Attack a Different PLC
Forescout used Claude to port a WAGO PLC exploit for $536 in 8 hours, and an AI-generated payload later permanently bricked the test device.
55
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout used Anthropic's Claude to port a working pre-auth RCE exploit for CVE-2021-31886 between WAGO PLCs, executing ARM shellcode on live hardware.
45
Related CVEs
by mentions- CVE-2021-318863%9.8A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All…
Appears with
- Forescoutorganization · 2
- Ghidraproduct · 2
- Nucleus RTOSproduct · 1
- CISAorganization · 1
- Claudeai model · 1
- Rockwell Automationvendor · 1
- Nucleus FTP serverproduct · 1
- WAGO 750-831product · 1
- PFC100product · 1
- WAGO 750-852product · 1
- Claude Opus 4.6ai model · 1
- Anthropicvendor · 1
- FBIorganization · 1
- Schneider Electricvendor · 1
- Forescoutvendor · 1
- Claudeproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.