CVE-2025-52873
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.
- Score
- CVSS 3.1 8.1 High
- Status
- Deferred - ics-cert@hq.dhs.gov
- Published
- 2025-09-18
- Last modified
- 2026-10-18
- Weaknesses
- CWE-732
Affected products
- In-sight 2000 Series (Cognex)
- In-sight 7000 Series (Cognex)
- In-sight 8000 Series (Cognex)
- In-sight 9000 Series (Cognex)
- In-sight Explorer (Cognex)
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06
