VULNERABILITY INTELLIGENCE
CVE-2025-54497
CVSS score8.1 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSerialPort functionality to modify relevant device properties (such as serial interface settings), contradicting the security model proposed in the user manual.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-732