Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-54810

Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cognex In-Sight 2000 series

Default version status: unaffected

  • 5.x to ≤ 6.5.1affected

Cognex In-Sight 7000 series

Default version status: unaffected

  • 5.x to ≤ 6.5.1affected

Cognex In-Sight 8000 series

Default version status: unaffected

  • 5.x to ≤ 6.5.1affected

Cognex In-Sight 9000 series

Default version status: unaffected

  • 5.x to ≤ 6.5.1affected

Cognex In-Sight Explorer

Default version status: unaffected

  • 5.x to ≤ 6.5.1affected

References