Vulnerability · Published May 29, 2026 · Assigned by icscert
CVE-2026-7786Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials
Critical 9.8
In plain English
A critical-severity hard-coded credentials in USR-W610 RS232/485 to Wi-Fi/Ethernet Converter from Jinan USR IOT Technology Limited (PUSR). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.4%top 64.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Jinan USR IOT Technology Limited (PUSR) | USR-W610 RS232/485 to Wi-Fi/Ethernet Converter | 7.03T.07 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H