Vulnerability in Cognex In-Sight 2000 Series
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Cognex In-sight 2000 Series — versions 5.x
- Cognex In-sight 7000 Series — versions 5.x
- Cognex In-sight 8000 Series — versions 5.x
- Cognex In-sight 9000 Series — versions 5.x
- Cognex In-sight Explorer — versions 5.x
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-54818?
- CVE-2025-54818 is a high-severity vulnerability in Cognex In-Sight 2000 Series, classified under Cleartext Transmission of Sensitive Information. CVSS score: 8.0/10. Published 2025-09-18.
- How severe is CVE-2025-54818?
- High severity. CVSS v3 base score is 8.0 out of 10.