Vulnerabilities

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image.

The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of management frame protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encrypti…

The web management interface of the device renders the passwords in a plaintext input field.

The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication.

The web management interface of the device allows the administrator username and password to be set to blank values.