CVE-2025-53947

{
  "id": "CVE-2025-53947",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-18T21:15:48.143",
  "lastModified": "2026-10-18T21:10:00.120",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local attacker with low privileges on the Windows system where the \nsoftware is installed can exploit this vulnerability to corrupt \nsensitive data. A data folder is created with very weak privileges, \nallowing any user logged into the Windows system to modify its content."
    },
    {
      "lang": "es",
      "value": "Un atacante local con privilegios bajos en el sistema Windows donde el software está instalado puede explotar esta vulnerabilidad para corromper datos sensibles. Se crea una carpeta de datos con privilegios muy débiles, permitiendo a cualquier usuario que haya iniciado sesión en el sistema Windows modificar su contenido."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Cognex",
          "product": "In-Sight 2000 series",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.x",
              "lessThanOrEqual": "6.5.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Cognex",
          "product": "In-Sight 7000 series",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.x",
              "lessThanOrEqual": "6.5.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Cognex",
          "product": "In-Sight 8000 series",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.x",
              "lessThanOrEqual": "6.5.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Cognex",
          "product": "In-Sight 9000 series",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.x",
              "lessThanOrEqual": "6.5.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Cognex",
          "product": "In-Sight Explorer",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "5.x",
              "lessThanOrEqual": "6.5.1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 6.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-19T12:09:45.113789Z",
          "id": "CVE-2025-53947",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06",
      "source": "[email protected]"
    }
  ]
}