Vulnerability · Published Sep 18, 2025 · Assigned by icscert
CVE-2025-54810Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
High 8.0
In plain English
A high-severity security flaw in In-Sight 2000 series from Cognex. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Official description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cognex | In-Sight 2000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 7000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 8000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 9000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight Explorer | 5.x – through 6.5.1 |
Weakness: CWE-294 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H