Description
The embedded web interface of the device does not support HTTPS/TLS for
authentication and uses HTTP Basic Authentication. Traffic is encoded
but not encrypted, exposing user credentials to passive interception by
attackers on the same network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jinan USR IOT Technology Limited (PUSR) | USR-W610 | ≤ 3.1.1.0 | — |
Advisories 1
- ICSA-26-050-03 Jinan USR IOT Technology Limited (PUSR) USR-W610 CISA ICS & IT advisories · Feb 19, 2026