Skip to content
OpenAdvisories
High · 8.0 CVE-2025-54810 EUVD-2025-30228GHSA-cr6h-4367-m34r

Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay

Published Sep 18, 2025 · Updated Sep 19, 2025 · Assigned by icscert

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose

a proprietary protocol on TCP port 1069 to perform management operations
such as modifying system properties. The user management functionality
handles sensitive data such as registered usernames and passwords over
an unencrypted channel, allowing an adjacent attacker to intercept valid
credentials to gain access to the device.

Affected products

VendorProductAffectedFixed
Cognex In-Sight 2000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 7000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 8000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 9000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight Explorer 5.x – ≤ 6.5.1 —

Advisories 1

References