Description
The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user credentials to passive interception by attackers on the same network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Jinan USR IOT Technology Limited (PUSR) USR-W610
Default version status: unaffected
0 to ≤ 3.1.1.0affected