CVE-2025-54497: Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
Cognex · In-Sight 2000 series
Affected: Cognex In-Sight 2000 series · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 25% of scored CVEs
DescriptionCVE.org
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSerialPort functionality to modify relevant device properties (such as serial interface settings), contradicting the security model proposed in the user manual.
Affected products5
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Cognex · In-Sight 2000 seriesfrom 5.x up to and including 6.5.1
- Cognex · In-Sight 7000 seriesfrom 5.x up to and including 6.5.1
- Cognex · In-Sight 8000 seriesfrom 5.x up to and including 6.5.1
- Cognex · In-Sight 9000 seriesfrom 5.x up to and including 6.5.1
- Cognex · In-Sight Explorerfrom 5.x up to and including 6.5.1
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Cognex
- Published
- September 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-54497 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.