CVE-2025-54860
Full vulnerability record from the local CVENow database.
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a denial-of-service attack, leaving the telnet service into an unreachable state.
Severity
MEDIUM
CVSS score
6.9
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2025-09-18 22:15:46.747000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-54860",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T22:15:46.747",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow \nmanagement operations on the device such as firmware upgrades and device\n reboot requiring an authentication. A wrong management of login \nfailures of the service allows a denial-of-service attack, leaving the telnet service \ninto an unreachable state."
},
{
"lang": "es",
"value": "Cognex In-Sight Explorer y el firmware de la cámara In-Sight exponen un servicio basado en telnet en el puerto 23 para permitir operaciones de gestión en el dispositivo, como actualizaciones de firmware y el reinicio del dispositivo, que requieren una autenticación. Una gestión incorrecta de los fallos de inicio de sesión del servicio permite un ataque de denegación de servicio, dejando el servicio telnet en un estado inalcanzable."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cognex",
"product": "In-Sight 2000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 7000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 8000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight 9000 series",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Cognex",
"product": "In-Sight Explorer",
"defaultStatus": "unaffected",
"versions": [
{
"version": "5.x",
"lessThanOrEqual": "6.5.1",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.5,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-09-19T13:15:34.752454Z",
"id": "CVE-2025-54860",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-307"
}
]
}
],
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06",
"source": "[email protected]"
}
]
}