PT-2026-44970 · Jinan Usr Iot Technology Limited · Usr-W610 Rs232/485 To Wi-Fi/Ethernet Converter

Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-7786

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authenticate to device services.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2026-7786

Affected Products

Usr-W610 Rs232/485 To Wi-Fi/Ethernet Converter

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-7786 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-02.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-26-148-02 · Note