Skip to content
OpenAdvisories
High ICSA-25-261-06 9 CVEs

Cognex In-Sight Explorer and In-Sight Camera Firmware

Published Sep 18, 2025 · Updated Sep 18, 2025

Vendor: Cognex Product: In-Sight 2000 series Product: In-Sight 7000 series Product: In-Sight 8000 series Product: In-Sight 9000 series Product: In-Sight Explorer

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, steal credentials, modify files, or cause a denial-of-service condition.

Vulnerabilities 9

  • High 8.8
    CVE-2025-53969

    Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management operations such as changing network settin…

    Cognex In-Sight 7000 series In-Sight 9000 series In-Sight 2000 series
  • High 8.6
    CVE-2025-47698

    An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credent…

    Cognex In-Sight 7000 series In-Sight 9000 series In-Sight 2000 series
  • High 8.1
    CVE-2025-52873

    Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke …

    Cognex In-Sight 8000 series In-Sight Explorer In-Sight 7000 series
  • High 8.1
    CVE-2025-54497

    Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke …

    Cognex In-Sight 2000 series In-Sight 8000 series In-Sight Explorer
  • High 8.0
    CVE-2025-54754

    Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

    An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex devic…

    Cognex In-Sight Explorer In-Sight 7000 series In-Sight 9000 series
  • High 8.0
    CVE-2025-54810

    Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames an…

    Cognex In-Sight 7000 series In-Sight 9000 series In-Sight 2000 series
  • High 8.0
    CVE-2025-54818

    Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames an…

    Cognex In-Sight 7000 series In-Sight 9000 series In-Sight 2000 series
  • High 7.7
    CVE-2025-53947

    Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

    A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify…

    Cognex In-Sight 9000 series In-Sight 2000 series In-Sight 8000 series
  • High 7.7
    CVE-2025-54860

    Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts

    Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures …

    Cognex In-Sight 2000 series In-Sight 8000 series In-Sight Explorer

Revision history

  1. #1

    Initial Publication

References