CVE-2025-53969 - CVE House
Back to Database
Status published High CVE-2025-53969

Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security

Vulnerability Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management operations such as changing network settings or modifying users' access to the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53969

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Diego Giubertoni of Nozomi Networks reported these vulnerabilities to CISA.

References

More from Cognex

View All →
CVE-2025-54860
Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts
Medium 6.9
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
High 8.6
CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
High 8.6
CVE-2025-54754
Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password
High 8.6
CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
High 7.2

Affected Vendor

Affected Software

In-Sight 2000 series, In-Sight 7000 series, In-Sight 8000 series, In-Sight 9000 series, In-Sight Explorer
Vulnerable Versions:
5.x

Timeline

Official Publish: September 18th, 2025
Last Modified: September 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-602

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.