What’s Vulnerable › Vulnerabilities

CVE-2025-54818: Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-10-18
• Weakness: CWE-319

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.

Affected products

• Cognex In-Sight 2000 series: from 5.x through 6.5.1
• Cognex In-Sight 7000 series: from 5.x through 6.5.1
• Cognex In-Sight 8000 series: from 5.x through 6.5.1
• Cognex In-Sight 9000 series: from 5.x through 6.5.1
• Cognex In-Sight Explorer: from 5.x through 6.5.1

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-54818 or the next vulnerability affects your stack