Vulnerability · Published Sep 18, 2025 · Assigned by icscert
CVE-2025-54818Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
High 8.0
In plain English
A high-severity security flaw in In-Sight 2000 series from Cognex. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Official description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cognex | In-Sight 2000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 7000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 8000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight 9000 series | 5.x – through 6.5.1 |
| Cognex | In-Sight Explorer | 5.x – through 6.5.1 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H