Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.
Metrics
CVSS 3.1 8.1/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cognex | In-Sight 2000 series | >= 5.x, <= 6.5.1 |
| Cognex | In-Sight 7000 series | >= 5.x, <= 6.5.1 |
| Cognex | In-Sight 8000 series | >= 5.x, <= 6.5.1 |
| Cognex | In-Sight 9000 series | >= 5.x, <= 6.5.1 |
| Cognex | In-Sight Explorer | >= 5.x, <= 6.5.1 |
References
Timeline
- Published
- Sep 18, 2025
- Last modified
- Oct 18, 2026
- NVD status
- Deferred