9.8 CriticalCWE-798
CVE-2026-7786
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
Jinan USR IOT Technology Limited (PUSR)USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 36% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.
Coverage 1 article · 1 outlet
- USR W610 flaw (CVE-2026-7786) lets attackers hijack convertersSecurityOnline · first in our coverage