Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a telnet-based service
on port 23 to allow management operations such as firmware upgrades and
device reboots, which require authentication. A user with protected
privileges can successfully invoke the SetSerialPort functionality to
modify relevant device properties (such as serial interface settings),
contradicting the security model proposed in the user manual.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cognex | In-Sight 2000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 7000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 8000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 9000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight Explorer | 5.x – ≤ 6.5.1 | — |
Advisories 1
- ICSA-25-261-06 Cognex In-Sight Explorer and In-Sight Camera Firmware CISA ICS & IT advisories · Sep 18, 2025