CVE-2025-54497
Full vulnerability record from the local CVENow database.
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSerialPort functionality to modify relevant device properties (such as serial interface settings), contradicting the security model proposed in the user manual.
Severity
HIGH
CVSS score
7.2
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2025-09-18 22:15:46.227000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-54497",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T22:15:46.227",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cognex In-Sight Explorer and In-Sight Camera Firmware expose \na telnet-based service \non port 23 to allow management operations such as firmware upgrades and \ndevice reboots, which require authentication. A user with protected \nprivileges can successfully invoke the SetSerialPort functionality to \nmodify relevant device properties (such as serial interface settings), \ncontradicting the security model proposed in the user manual."
},
{
"lang": "es",
"value": "Cognex In-Sight Explorer y el firmware de la cámara In-Sight exponen un servicio basado en telnet en el puerto 23 para permitir operaciones de gestión como actualizaciones de firmware y reinicios de dispositivos, que requieren autenticación. Un usuario con privilegios protegidos puede invocar con éxito la funcionalidad SetSerialPort para modificar propiedades relevantes del dispositivo (como la configuración de la interfaz serie), contradiciendo el modelo de seguridad propuesto en el manual de usuario."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cognex",
"product": "In-Sight 2000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 7000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 8000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 9000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight Explorer",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-19T13:12:33.199419Z",
"id": "CVE-2025-54497",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-732"
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06",
"source": "[email protected]"
}
]
}