CVE-2025-53947 - CVE House
Back to Database
Status published Medium CVE-2025-53947

Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

Vulnerability Description

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53947

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Diego Giubertoni of Nozomi Networks reported these vulnerabilities to CISA.

Affected Vendor

Affected Software

In-Sight 2000 series, In-Sight 7000 series, In-Sight 8000 series, In-Sight 9000 series, In-Sight Explorer
Vulnerable Versions:
5.x

Timeline

Official Publish: September 18th, 2025
Last Modified: September 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)