CISA ICSA-26-148-02 USR IOT USR-W610 硬编码凭证漏洞

漏洞概述 漏洞名称: Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter CVE编号: CVE-2026-7786 CVSS评分: v3.9.8 漏洞类型: 使用硬编码凭证 影响: 成功利用此漏洞可能导致攻击者获得设备的管理员访问权限。 影响范围 受影响版本: USR-W610 RS232/485 to Wi-Fi/Ethernet Converter 7.03T.07 关键基础设施部门: 关键制造业 部署地区: 全球 公司总部位置: 中国 修复方案 推荐实践: - 最小化所有控制系统设备和/或系统的网络暴露，确保它们不可从互联网访问。 - 将控制系统网络和远程设备置于防火墙后面，并与业务网络隔离。 - 当需要远程访问时，使用更安全的方法，如虚拟专用网络（VPN），并认识到VPN可能存在漏洞，应更新到最新版本。 - 在部署防御措施之前，进行适当的影响分析和风险评估。 - 实施推荐的网络安全策略，以主动防御ICS资产。 - 遵循内部程序，报告可疑恶意活动。 其他信息 发布日期: 2026年5月28日 警报代码: ICSA-26-148-02 相关主题: 工业控制系统漏洞、工业控制系统 致谢: Arun Mane 和 Omkar Mali 向CISA报告了此漏洞。 标签 行业: 关键制造业 主题: 工业控制系统漏洞、工业控制系统 修订历史 初始发布日期: 2026年5月28日 修订版本: 1 摘要: 初始发布 法律通知和使用条款 本产品受此通知和隐私及使用政策的约束。 分享反馈 我们最近更新了匿名产品调查，欢迎提供反馈。 相关公告 ABB EIBPORT ABB Busch-Welcome 2 Wire Door Opener Actuator XCharge C6 MacGregor Voyage Data Recorder (VDR) G4e 页脚信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 导航栏 Topics Spotlight Resources & Tools News & Events Careers About 页脚链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚社交媒体图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚社交媒体图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚社交媒体图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚社交媒体图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚社交媒体图标 Facebook X LinkedIn RSS 页脚标志 Cybersecurity & Infrastructure Security Agency CISA.gov An official website of the U.S. Department of Homeland Security 页脚搜索框 Search 页脚按钮 NO-COST CYBER SERVICES SECURE BY DESIGN SECURE YOUR BUSINESS SHIELDS UP REPORT A CYBER ISSUE 页脚版权 © 2026 Cybersecurity & Infrastructure Security Agency 页脚免责声明 An official website of the United States government Here's how you know 页脚语言选择 English 页脚社交媒体链接 Facebook X LinkedIn RSS 页脚联系方式 1-844-Say-CISA contact@cisa.dhs.gov 页脚导航链接 About CISA Budget and Performa

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CISA ICSA-26-148-02 USR IOT USR-W610 硬编码凭证漏洞

目标达成感谢每一位支持者 — 我们达成了 100% 目标！