CVE-2026-7786
Plaintext Admin Credentials in USR-W610 Firmware
Publication date: 2026-05-29
Last updated on: 2026-05-29
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jinan_usr_iot_technology_limited | usr-w610 | * |
| jinan_usr_iot_technology_limited | pusr_usr-w610 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-7786 is a critical vulnerability in the firmware of the Jinan USR IOT Technology Limited PUSR USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device.
The firmware contains plaintext administrative credentials embedded within the firmware image. These credentials can be extracted by analyzing the firmware.
An attacker who obtains these credentials can authenticate to the device services with administrator-level access.
How can this vulnerability impact me? :
This vulnerability allows an attacker to gain unauthorized administrator access to the affected device.
With such access, the attacker can compromise the confidentiality, integrity, and availability of the device and its services.
This could lead to unauthorized control, data theft, disruption of device operations, or further network compromise.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves plaintext administrative credentials embedded in the firmware image of the PUSR USR-W610 device. Detection typically requires firmware analysis to extract these credentials.
There are no specific commands provided in the available resources to detect this vulnerability directly on your network or system.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, it is recommended to minimize network exposure of the affected devices by isolating them behind firewalls.
Use secure remote access methods such as VPNs to access these devices.
Contact the vendor, PUSR, for any available updates or patches, although no response has been reported from them so far.
Additionally, follow guidance on securing industrial control systems as provided by CISA.