Vulnerabilities

CVSS

9.8 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Risk score

78.4

Published

2026-05-29

Status

Published

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

Weaknesses

CWE-798

Coverage 1

vulnerability

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter

This advisory details a critical vulnerability in the Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter, specifically version 7.03T.07. The device contains hardcoded administrative cr…

CISA Advisories · May 28, 2026 Critical

CVE-2026-7786CNfirmwarecredentialsiot

All articles mentioning it

Advisories and references

• cisa.gov/news-events/ics-advisories/icsa-26-148-02
• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...