Jinan Usr Iot Technology Limited (Pusr) Usr-W610
4 CVEs affecting Jinan Usr Iot Technology Limited (Pusr) Usr-W610. Latest disclosed: 2026-02-20. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-25715 | Critical | 9.8 | 2026-02-20 | The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authent… |
CVE-2026-26048 | High | 7.5 | 2026-02-20 | The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassoci… |
CVE-2026-24455 | High | 7.5 | 2026-02-20 | The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypt… |
CVE-2026-26049 | Medium | 5.7 | 2026-02-20 | The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access t… |