CVE-2025-54860: Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts

Severity: high (CVSS 7.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-09-18 · updated 2026-10-18
Weakness: CWE-307

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a denial-of-service attack, leaving the telnet service into an unreachable state.

Affected products

Cognex In-Sight 2000 series: from 5.x through 6.5.1
Cognex In-Sight 7000 series: from 5.x through 6.5.1
Cognex In-Sight 8000 series: from 5.x through 6.5.1
Cognex In-Sight 9000 series: from 5.x through 6.5.1
Cognex In-Sight Explorer: from 5.x through 6.5.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06

Get alerted when CVE-2025-54860 or the next vulnerability affects your stack