CVE-2026-7786
The firmware for certain Jinan USR IOT Technology Limited USR-W610 converters contains administrative passwords stored in plain text. This means anyone who analyzes the device's software can find these credentials.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Users of the Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter.
Real-world impact
An attacker could use these extracted credentials to log in to the device's management services, potentially gaining full control over the converter.
Why this severity
This vulnerability is rated critical because it allows an attacker to gain full access to the device remotely without needing any special privileges or user interaction.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources
Timeline
- May 29, 2026 · May 29, 2026PublishedDisclosed and added to the National Vulnerability Database.
- Jul 21, 2026 · 14d agoAdvisory updatedThe NVD record was last revised.