critical9.8
CVE-2022-29730
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account.
Impact
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Usr | Usr-G808 Firmware | Version 1.0.36 |
| Usr | Usr-G807 Firmware | Version 1.0.36 |
| Usr | Usr-G806 Firmware | Version 1.0.36 |
| Usr | Usr-G800v2 Firmware | Version 1.0.36 |
| Usr | Usr-Lg220-L Firmware | Version 1.2.7 |