What’s Vulnerable › Vulnerabilities

CVE-2022-29730

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-02 · updated 2026-06-17
• Weakness: CWE-798

Description

USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.

Affected products

• Usr-G800V2 Firmware: 1.0.36
• USR-G806: 1.0.36
• Usr-G807 Firmware: 1.0.36
• Usr-G808 Firmware: 1.0.36
• Usr-Lg220-L Firmware: 1.2.7

References

• https://www.pusr.com/
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5705.php
• https://www.pusr.com/
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5705.php

Get alerted when CVE-2022-29730 or the next vulnerability affects your stack