What’s Vulnerable › Vulnerabilities

CVE-2025-52873: Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-10-18
• Weakness: CWE-732

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.

Affected products

• Cognex In-Sight 2000 series: from 5.x through 6.5.1
• Cognex In-Sight 7000 series: from 5.x through 6.5.1
• Cognex In-Sight 8000 series: from 5.x through 6.5.1
• Cognex In-Sight 9000 series: from 5.x through 6.5.1
• Cognex In-Sight Explorer: from 5.x through 6.5.1

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-52873 or the next vulnerability affects your stack