The USR IOT industrial router is vulnerable to hard-coded credentials within its Linux distribution image. These sets of credentials are never exposed to the end-user and cannot be changed through any normal operation of the device. Affected versions include 1.0.36 and 1.2.7.
f2b44867a9d3fc671d927368e7311aaf4147f3f58be89622912f7a0f06ebb5cc