CVE-2026-24455 — Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user …
Published: 2026-02-20 · CVSS: 7.5 · CVSS 3.1
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user credentials to passive interception by attackers on the same network.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7