CVE-2025-53947: Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

Severity: high (CVSS 7.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-18 · updated 2026-10-18
Weakness: CWE-276

Description

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content.

Affected products

Cognex In-Sight 2000 series: from 5.x through 6.5.1
Cognex In-Sight 7000 series: from 5.x through 6.5.1
Cognex In-Sight 8000 series: from 5.x through 6.5.1
Cognex In-Sight 9000 series: from 5.x through 6.5.1
Cognex In-Sight Explorer: from 5.x through 6.5.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-53947 or the next vulnerability affects your stack