Skip to content
10.0 Critical

CVE-2026-3587 An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface,…

Description

An unauthenticated remote attacker can exploit a hidden function in the CLI prompt to escape the restricted interface, leading to full compromise of the device.

Affected products and versions

Product Affected versions Fixed in
Lean Managed Switch 852-1812 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Lean Managed Switch 852-1813 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Lean Managed Switch 852-1813-000-001 0.0 0.0.0 → < 1.2.3.S0 1.2.3.S0
Lean Managed Switch 852-1816 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Industrial Managed Switch 852-303 0.0 0.0.0 → < 1.2.8.S0 1.2.8.S0
Industrial Managed Switch 852-1305 0.0 0.0.0 → < 1.2.0.S0 1.2.0.S0
Industrial Managed Switch 852-1305-000-001 0.0 0.0.0 → < 1.2.0.S0 1.2.0.S0
Industrial Managed Switch 852-1505-000-001 0.0 0.0.0 → < 1.2.0.S0 1.2.0.S0
Industrial Managed Switch 852-1505 0.0 0.0.0 → < 1.1.9.S0 1.1.9.S0
Show the 7 other branches
Product Affected versions Fixed in
Industrial Managed Switch 852-602 0.0 0.0.0 → < 1.0.6.S0 1.0.6.S0
Industrial Managed Switch 852-603 0.0 0.0.0 → < 1.0.6.S0 1.0.6.S0
Industrial Managed Switch 852-1605 0.0 0.0.0 → < 1.2.5.S0 1.2.5.S0
Lean Managed Switch 852-1812-010-000 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Lean Managed Switch 852-1813-010-000 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Lean Managed Switch 852-1816-010-000 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Lean Managed Switch 852-1813/010-001 0.0 0.0.0 → < 1.2.1.S0 1.2.1.S0
Track this CVE