CVE-2022-29730
moderate-risk
Published 2022-06-02
USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.
Do I need to act?
-
0.64% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10
Critical
NETWORK
/ LOW complexity
Affected Products (5)
Usr-G808 Firmware
Usr-G807 Firmware
Usr-G806 Firmware
Usr-G800V2 Firmware
Usr-Lg220-L Firmware
Affected Vendors
References (4)
Vendor Advisory
https://www.pusr.com/
Vendor Advisory
https://www.pusr.com/
46
/ 100
moderate-risk
Severity
32/34 · Critical
Exploitability
2/34 · Minimal
Exposure
12/34 · Low