Jinan USR IOT Technology Limited (PUSR) USR-W610 Insufficiently Protected Credentials
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.7epss 0.3%
exploitation probability
0.3%top 80% of all CVEs
observed exploitation
nono source reports it
The web management interface of the device renders the passwords in a
plaintext input field. The current password is directly visible to
anyone with access to the UI, potentially exposing administrator
credentials to unauthorized observation via shoulder surfing,
screenshots, or browser form caching.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Affected products
Jinan USR IOT Technology Limited (PUSR) · USR-W610