# AI-Assisted PLC Exploit Porting: WAGO RCE via Claude

> Forescout researchers used Anthropic's Claude to port a WAGO PLC RCE exploit, demonstrating AI's potential in offensive security but highlighting current challenges.

- Published: 2026-09-01T12:56:06.000Z
- Severity: info
- Category: Threat Intel
- Tags: Industrial Control Systems, ICS, AI, Exploit Development, Anthropic Claude
- CVEs: CVE-2021-31886 (CVSS 9.8)
- Author: Runtime Rebel Intel
- Primary source: https://www.securityweek.com/experiment-porting-a-plc-exploit-with-ai-takes-hours-and-hundreds-of-dollars/
- Canonical: https://runtimerebel.com/blog/ai-assisted-plc-exploit-porting-wago-rce-via-claude

## Key points

- AI can port RCE exploits for PLCs, demonstrating potential for future offensive scaling.
- WAGO 750-852 and 750-831 PLCs are affected, leveraging CVE-2021-31886.
- Patch known ICS vulnerabilities and monitor AI's evolving role in offensive security.

## [AI](/glossary#ai)'s Role in [Exploit](/glossary#exploit) Development for Industrial Control Systems

Researchers at Forescout's Vedere Labs have successfully demonstrated the use of artificial intelligence (AI) to port a remote code execution ([RCE](/glossary#rce)) exploit from one Programmable Logic Controller ([PLC](/glossary#plc)) model to another. This experiment, detailed by [SecurityWeek](https://www.securityweek.com/experiment-porting-a-plc-exploit-with-ai-takes-hours-and-hundreds-of-dollars/), utilized Anthropic's Claude AI to adapt an existing [vulnerability](/glossary#vulnerability) for a new target. While the process required significant human oversight, time, and financial investment, it underscores AI's growing potential in offensive security and the need for defenders to prepare for evolving threat landscapes.

### Technical Deep Dive: AI-Assisted PLC Exploit Porting

The experiment commenced with an established exploit for the WAGO 750-852 PLC, which leveraged [CVE-2021-31886](https://nvd.nist.gov/vuln/detail/CVE-2021-31886). This vulnerability is a pre-authentication buffer overflow within the Nucleus FTP server, allowing an unauthenticated attacker to execute arbitrary ARM shellcode on the targeted device. Forescout's objective was to port this exploit to a related but distinct model, the WAGO 750-831 PLC, and subsequently explore whether the AI could develop a full command-and-control ([C2](/glossary#c2)) implant.

Initially, the researchers used Claude Code, providing it access to a terminal, reference files, the reverse-engineering tool Ghidra, and the physical target device. The AI successfully confirmed the presence of the vulnerability through a combination of live probing and static [firmware](/glossary#firmware) analysis, leading to a [payload](/glossary#payload) that could crash the PLC. However, achieving controlled code execution proved to be a more complex challenge.

Early attempts saw the AI pursuing incorrect leads, necessitating significant human intervention and technical context from the researchers. A critical turning point occurred when the team upgraded from Claude Sonnet 4.6 to Claude Opus 4.6 and instructed the AI to solicit help when uncertain about firmware specifics. This led to a breakthrough where the AI identified why injected code was being erased before execution, allowing it to adjust its methodology to preserve the payload. After overcoming this hurdle, Claude rapidly produced two working payloads within 12 minutes.

Despite this success, the cost and effort were considerable. The final RCE development phase alone consumed over $500 in [API](/glossary#api) usage across an eight-hour session. A subsequent attempt to build a C2 implant resulted in one of Claude's complex payloads writing to a flash memory region, permanently bricking the device. Forescout acknowledges that a human researcher might achieve the initial RCE port faster and cheaper without AI *currently*. However, they emphasize the long-term implications, suggesting that as the need for expert intervention decreases, AI could significantly reduce the marginal cost of scaling such exploit development across numerous related targets simultaneously. This has critical implications for **understanding [CVE](/glossary#cve)-2021-31886 in WAGO PLCs** and similar vulnerabilities across broader [ICS](/glossary#ics) deployments.

### Recommendations for Industrial Control System Security

Given the potential for **WAGO 750-831 RCE exploit development with AI** and similar advancements, organizations operating Industrial Control Systems (ICS) and Operational Technology ([OT](/glossary#ot)) environments must prioritize proactive defense measures:

*   **[Vulnerability Management](/glossary#vulnerability-management):** Immediately identify and [patch](/glossary#patch) known vulnerabilities, particularly those impacting internet-exposed PLCs and other OT devices. Prioritize patching for [CVE-2021-31886](https://nvd.nist.gov/vuln/detail/CVE-2021-31886) in WAGO PLCs and similar critical flaws that could enable pre-authentication RCE.
*   **[Network Segmentation](/glossary#network-segmentation):** Implement strict network segmentation to isolate OT networks from IT networks and external threats. Limit direct internet exposure for all critical ICS components.
*   **Monitoring and Detection:** Deploy specialized Intrusion Detection Systems ([IDS](/glossary#ids)) and monitoring solutions tailored for OT environments to detect anomalous activity, unauthorized access attempts, and indicators of compromise.
*   **Secure Configuration:** Ensure PLCs and other OT devices are configured securely, disabling unnecessary services, changing default credentials, and applying [hardening](/glossary#hardening) guidelines.
*   **Stay Informed on AI Advancements:** Security teams should closely monitor advancements in AI, not only for defensive applications but also for its evolving capabilities in offensive security research and exploit generation. This awareness is crucial for anticipating future threats.

**Related:** [OpenAI's GPT-5.6-Cyber and Accelerated Exploit Development](/blog/openai-s-gpt-5-6-cyber-and-accelerated-exploit-development), [Chinese LLMs Reshape Cyber Defense: Attacker Advantage](/blog/chinese-llms-reshape-cyber-defense-attacker-advantage)

---

AI-generated analysis from the primary source above; not human-reviewed before publication — verify anything operational against the original (https://runtimerebel.com/editorial). Quote with attribution and a link to the canonical URL: https://runtimerebel.com/blog/ai-assisted-plc-exploit-porting-wago-rce-via-claude