Skip to content
OpenAdvisories
High · 8.0 CVE-2025-54818 EUVD-2025-30229GHSA-87gj-4m36-p6h7

Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information

Published Sep 18, 2025 · Updated Sep 19, 2025 · Assigned by icscert

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose

a proprietary protocol on TCP port 1069 to perform management operations
such as modifying system properties. The user management functionality
handles sensitive data such as registered usernames and passwords over
an unencrypted channel, allowing an adjacent attacker to intercept valid
credentials to gain access to the device.

Affected products

VendorProductAffectedFixed
Cognex In-Sight 2000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 7000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 8000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight 9000 series 5.x – ≤ 6.5.1 —
Cognex In-Sight Explorer 5.x – ≤ 6.5.1 —

Advisories 1

References