CVE-2025-54810 - CVE House
Back to Database
Status published High CVE-2025-54810

Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay

Vulnerability Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54810

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Diego Giubertoni of Nozomi Networks reported these vulnerabilities to CISA.

References

More from Cognex

View All →
CVE-2025-54860
Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts
Medium 6.9
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
High 8.6
CVE-2025-54754
Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password
High 8.6
CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
High 7.2
CVE-2025-53969
Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security
High 8.6

Affected Vendor

Affected Software

In-Sight 2000 series, In-Sight 7000 series, In-Sight 8000 series, In-Sight 9000 series, In-Sight Explorer
Vulnerable Versions:
5.x

Timeline

Official Publish: September 18th, 2025
Last Modified: September 19th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-294

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.