CVE-2025-52873

HighCVSS 8.1/10Last modified Oct 18, 2026

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Sep 18, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-528755.4In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible CVE-2025-528765.4In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible CVE-2025-528774.8In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible CVE-2025-528784.3In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions CVE-2025-528794.8In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible CVE-2025-52889.8The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation du CVE-2025-528804.2Komga is a media server for comics, mangas, BDs, magazines and eBooks. A Cross-Site Scripting (XSS) vulnerability has been discovered in ver CVE-2025-528817.5runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attac CVE-2025-528828.8Claude Code is an agentic coding tool. Claude Code extensions in VSCode and forks (e.g., Cursor, Windsurf, and VSCodium) and JetBrains IDEs CVE-2025-528835.3Meshtastic-Android is an Android application for the mesh radio software Meshtastic. Prior to version 2.5.21, an attacker is able to send an CVE-2025-528841.7RISC Zero is a zero-knowledge verifiable general computing platform, with Ethereum integration. The risc0-ethereum repository contains Solid CVE-2025-528856.1Poppler ia a library for rendering PDF files, and examining or modifying their structure. A use-after-free (write) vulnerability has been de