CVE-2026-25715

The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet service. This effectively disables authentication across all critical management channels, allowing any network-adjacent attacker to gain full administrative control without credentials.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) La interfaz de gestión web del dispositivo permite que el nombre de usuario y la contraseña del administrador se establezcan a valores en blanco. Una vez aplicado, el dispositivo permite la autenticación con credenciales vacías a través de la interfaz de gestión web y el servicio Telnet. Esto deshabilita eficazmente la autenticación en todos los canales de gestión críticos, permitiendo a cualquier atacante adyacente a la red obtener control administrativo total sin credenciales.

20 Feb 2026, 17:25

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-20 17:25

Updated : 2026-06-17 10:25

NVD link : CVE-2026-25715

Mitre link : CVE-2026-25715

CVE.ORG link : CVE-2026-25715

JSON object : View

Products Affected

No product.

CWE

CWE-521

Weak Password Requirements

{"id": "CVE-2026-25715", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "ics-cert@hq.dhs.gov"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25715", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-02-20T20:02:26.714876Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "ics-cert@hq.dhs.gov", "affectedData": [{"vendor": "Jinan USR IOT Technology Limited (PUSR)", "product": "USR-W610", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "3.1.1.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-02-20T17:25:53.293", "references": [{"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json", "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03", "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-521"}]}], "descriptions": [{"lang": "en", "value": "The web management interface of the device allows the administrator \nusername and password to be set to blank values. Once applied, the \ndevice permits authentication with empty credentials over the web \nmanagement interface and Telnet service. This effectively disables \nauthentication across all critical management channels, allowing any \nnetwork-adjacent attacker to gain full administrative control without \ncredentials."}, {"lang": "es", "value": "La interfaz de gesti\u00f3n web del dispositivo permite que el nombre de usuario y la contrase\u00f1a del administrador se establezcan a valores en blanco. Una vez aplicado, el dispositivo permite la autenticaci\u00f3n con credenciales vac\u00edas a trav\u00e9s de la interfaz de gesti\u00f3n web y el servicio Telnet. Esto deshabilita eficazmente la autenticaci\u00f3n en todos los canales de gesti\u00f3n cr\u00edticos, permitiendo a cualquier atacante adyacente a la red obtener control administrativo total sin credenciales."}], "lastModified": "2026-06-17T10:25:05.823", "sourceIdentifier": "ics-cert@hq.dhs.gov"}