CVE-2026-7786 — Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials

CVE-2026-7786

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials PUBLISHED

Description (CNA)

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

Affected (CNA)

Vendor / product	Versions
Jinan USR IOT Technology Limited (PUSR) / USR-W610 RS232/485 to Wi-Fi/Ethernet Converter	affected 7.03T.07

CWE

CWE-798

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-148-02
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-02.json

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.