Description
The web management interface of the device renders the passwords in a
plaintext input field. The current password is directly visible to
anyone with access to the UI, potentially exposing administrator
credentials to unauthorized observation via shoulder surfing,
screenshots, or browser form caching.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jinan USR IOT Technology Limited (PUSR) | USR-W610 | ≤ 3.1.1.0 | — |
Advisories 1
- ICSA-26-050-03 Jinan USR IOT Technology Limited (PUSR) USR-W610 CISA ICS & IT advisories · Feb 19, 2026