Back to Database
Status published
High
CVE-2021-32935
Cognex In-Sight OPC Server - Deserialization of Untrusted Data
Vulnerability Description
The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32935
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Amir Preminger of Claroty reported this vulnerability to CISA.
More from Cognex
View All →CVE-2025-54860
Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts
Medium
6.9
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
High
8.6
CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
High
8.6
CVE-2025-54754
Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password
High
8.6
CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
High
7.2
Affected Vendor
Cognex
View all reports →Affected Software
In-Sight OPC Server
Vulnerable Versions:
All
Timeline
Official Publish:
May 23rd, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H