Description
An attacker with adjacent access, without authentication, can exploit
this vulnerability to retrieve a hard-coded password embedded in
publicly available software. This password can then be used to decrypt
sensitive network traffic, affecting the Cognex device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cognex | In-Sight 2000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 7000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 8000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight 9000 series | 5.x – ≤ 6.5.1 | — |
| Cognex | In-Sight Explorer | 5.x – ≤ 6.5.1 | — |
Advisories 1
- ICSA-25-261-06 Cognex In-Sight Explorer and In-Sight Camera Firmware CISA ICS & IT advisories · Sep 18, 2025