Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a telnet-based service on port 23 to allow management operations such as
firmware upgrades and device reboots, which require authentication. A
user with protected privileges can successfully invoke the
SetSystemConfig functionality to modify relevant device properties (such
as network settings), contradicting the security model proposed in the
user manual.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cognex | In-Sight 2000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 7000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 8000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 9000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight Explorer | 5.x – ≤ 6.5.1 | — |
Advisories 1
- ICSA-25-261-06 Cognex In-Sight Explorer and In-Sight Camera Firmware CISA ICS & IT advisories · Sep 18, 2025