What’s Vulnerable › Vulnerabilities

CVE-2025-54497: Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-10-18
• Weakness: CWE-732

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSerialPort functionality to modify relevant device properties (such as serial interface settings), contradicting the security model proposed in the user manual.

Affected products

• Cognex In-Sight 2000 series: from 5.x through 6.5.1
• Cognex In-Sight 7000 series: from 5.x through 6.5.1
• Cognex In-Sight 8000 series: from 5.x through 6.5.1
• Cognex In-Sight 9000 series: from 5.x through 6.5.1
• Cognex In-Sight Explorer: from 5.x through 6.5.1

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-54497 or the next vulnerability affects your stack