Jinan USR IOT Technology Limited (PUSR) vulnerabilities
We track 4 vulnerabilities in Jinan USR IOT Technology Limited (PUSR) products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2026.
Latest Jinan USR IOT Technology Limited (PUSR) vulnerabilities
- 9.8 Critical severity
USR-W610 RS232/485 to Wi-Fi/Ethernet Converter: Use of Hard-coded Credentials
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image. These credentials can be extracted through firmware analysis and used to authen
- 7.5 High severity
USR-W610: Missing Authentication for Critical Functionality
The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause un
- 9.8 Critical severity
USR-W610: Weak Password Requirements
The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet service. This effectively d
- 7.5 High severity
USR-W610: Cleartext Transmission of Sensitive Information
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user credentials to passive interception by attackers on the same network.