VULNERABILITY INTELLIGENCE
CVE-2025-54810
CVSS score8.6 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-09-18
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.
Weakness classification
- CWE-294: Authentication Bypass by Capture-replay