CVE-2026-24455CWE-319

Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information

High · published February 20, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
18.9
In the wild
Unconfirmed
What it is

The embedded web interface of the device does not support HTTPS/TLS for

authentication and uses HTTP Basic Authentication. Traffic is encoded

but not encrypted, exposing user credentials to passive interception by

attackers on the same network.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00275 · 18.9th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-02-20T16:00Z
EPSS history
Timeline
  • 20 FEB 16:00Z
    Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information
    cvelistv5