High severity · published Sep 18, 2025
CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
8.1
CVSS
0.3%
EPSS
No
On KEV
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a telnet-based service
on port 23 to allow management operations such as firmware upgrades and
device reboots, which require authentication. A user with protected
privileges can successfully invoke the SetSerialPort functionality to
modify relevant device properties (such as serial interface settings),
contradicting the security model proposed in the user manual.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I2
In-Sight 2000 series · Cognex
5.x through 6.5.1 · source: vendor
I7
In-Sight 7000 series · Cognex
5.x through 6.5.1 · source: vendor
I8
In-Sight 8000 series · Cognex
5.x through 6.5.1 · source: vendor
I9
In-Sight 9000 series · Cognex
5.x through 6.5.1 · source: vendor
IE
In-Sight Explorer · Cognex
5.x through 6.5.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-54497
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-54497
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06
More from In-Sight 2000 series
8.8
CVE-2025-53969
Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security
8.6
CVE-2025-47698
An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials
8.1
CVE-2025-52873
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
8.0
CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
8.0
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
