Vulnerability in Cognex In-Sight 2000 Series
CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (8.5th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 8th percentile — 8.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Cognex In-Sight 2000 Series — versions 5.x
- Cognex In-Sight 7000 Series — versions 5.x
- Cognex In-Sight 8000 Series — versions 5.x
- Cognex In-Sight 9000 Series — versions 5.x
- Cognex In-Sight Explorer — versions 5.x
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-54810?
- CVE-2025-54810 is a high-severity vulnerability in Cognex In-Sight 2000 Series, classified under Authentication Bypass by Capture-replay. CVSS score: 8.0/10. Published 2025-09-18.
- How severe is CVE-2025-54810?
- High severity. CVSS v3 base score is 8.0 out of 10.