CVE-2026-7786

Summary

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

Affected Software

VendorProductVersion RangeStatus
Jinan USR IOT Technology Limited (PUSR)USR-W610 RS232/485 to Wi-Fi/Ethernet Converter7.03T.07affected

Weaknesses

  • CWE-798: CWE-798

Workarounds

Jinan USR IOT Technology Limited (PUSR) did not respond to CISA's attempts at coordination. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References