CVE-2025-52873
Full vulnerability record from the local CVENow database.
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.
Severity
HIGH
CVSS score
7.2
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2025-09-18 22:15:43.167000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-52873",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T22:15:43.167",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cognex In-Sight Explorer and In-Sight Camera Firmware expose \na telnet-based service on port 23 to allow management operations such as\n firmware upgrades and device reboots, which require authentication. A \nuser with protected privileges can successfully invoke the \nSetSystemConfig functionality to modify relevant device properties (such\n as network settings), contradicting the security model proposed in the \nuser manual."
},
{
"lang": "es",
"value": "Cognex In-Sight Explorer y el firmware de la cámara In-Sight exponen un servicio basado en telnet en el puerto 23 para permitir operaciones de gestión como actualizaciones de firmware y reinicios de dispositivos, que requieren autenticación. Un usuario con privilegios protegidos puede invocar con éxito la funcionalidad SetSystemConfig para modificar propiedades relevantes del dispositivo (como la configuración de red), contradiciendo el modelo de seguridad propuesto en el manual de usuario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cognex",
"product": "In-Sight 2000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 7000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 8000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 9000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight Explorer",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-19T13:15:12.315307Z",
"id": "CVE-2025-52873",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-732"
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06",
"source": "[email protected]"
}
]
}