CVE-2025-54754: Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-18 · updated 2026-10-18
Weakness: CWE-259

Description

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device.

Affected products

Cognex In-Sight 2000 series: from 5.x through 6.5.1
Cognex In-Sight 7000 series: from 5.x through 6.5.1
Cognex In-Sight 8000 series: from 5.x through 6.5.1
Cognex In-Sight 9000 series: from 5.x through 6.5.1
Cognex In-Sight Explorer: from 5.x through 6.5.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-54754 or the next vulnerability affects your stack