CVE-2025-54810
Full vulnerability record from the local CVENow database.
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
Severity
HIGH
CVSS score
8.6
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2025-09-18 22:15:46.403000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-54810",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T22:15:46.403",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cognex In-Sight Explorer and In-Sight Camera Firmware expose \n\na proprietary protocol on TCP port 1069 to perform management operations\n such as modifying system properties. The user management functionality \nhandles sensitive data such as registered usernames and passwords over \nan unencrypted channel, allowing an adjacent attacker to intercept valid\n credentials to gain access to the device."
},
{
"lang": "es",
"value": "Cognex In-Sight Explorer y el firmware de la cámara In-Sight exponen un protocolo propietario en el puerto TCP 1069 para realizar operaciones de gestión, como la modificación de propiedades del sistema. La funcionalidad de gestión de usuarios maneja datos sensibles, como nombres de usuario y contraseñas registrados, a través de un canal no cifrado, lo que permite a un atacante adyacente interceptar credenciales válidas para obtener acceso al dispositivo."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cognex",
"product": "In-Sight 2000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 7000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 8000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 9000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight Explorer",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.1,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-19T13:11:28.075498Z",
"id": "CVE-2025-54810",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-294"
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06",
"source": "[email protected]"
}
]
}