CVE-2022-29730: Usr Usr-g800v2 Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest privileged account. The credentials cannot be altered through normal operation of the device.

Affected products

• Usr Usr-g800v2 Firmware: version 1.0.36 only
• Usr Usr-g806 Firmware: version 1.0.36 only
• Usr Usr-g807 Firmware: version 1.0.36 only
• Usr Usr-g808 Firmware: version 1.0.36 only
• Usr Usr-LG220-L Firmware: version 1.2.7 only

Published 2022-06-02. Last modified 2026-06-17.