Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-1525

Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cognex 3D-A1000 Dimensioning System

  • all to ≤ 1.0.3 (3354)affected

References