Skip to content
OpenAdvisories
Critical ICSA-22-249-03 3 CVEs

Cognex 3D-A1000 Dimensioning System

Published Sep 6, 2022 · Updated Sep 6, 2022

Vendor: Cognex Product: 3D-A1000 Dimensioning System

Summary

Successful exploitation of these vulnerabilities could result in unauthorized password changes, escalation of privileges, falsifying of password logs, and bypassing of web access controls.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-1368

    Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function

    The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monito…

    Cognex 3D-A1000 Dimensioning System
  • Critical 9.1
    CVE-2022-1525

    Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security

    The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code…

    Cognex 3D-A1000 Dimensioning System
  • Medium 5.3
    CVE-2022-1522

    Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

    The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, c…

    Cognex 3D-A1000 Dimensioning System

Revision history

  1. #1

    Publication Date

References