High severity · published Sep 18, 2025
CVE-2025-52873
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
8.1
CVSS
0.3%
EPSS
No
On KEV
Description
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a telnet-based service on port 23 to allow management operations such as
firmware upgrades and device reboots, which require authentication. A
user with protected privileges can successfully invoke the
SetSystemConfig functionality to modify relevant device properties (such
as network settings), contradicting the security model proposed in the
user manual.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I2
In-Sight 2000 series · Cognex
5.x through 6.5.1 · source: vendor
I7
In-Sight 7000 series · Cognex
5.x through 6.5.1 · source: vendor
I8
In-Sight 8000 series · Cognex
5.x through 6.5.1 · source: vendor
I9
In-Sight 9000 series · Cognex
5.x through 6.5.1 · source: vendor
IE
In-Sight Explorer · Cognex
5.x through 6.5.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52873
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52873
www.cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06
More from In-Sight 2000 series
8.8
CVE-2025-53969
Cognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security
8.6
CVE-2025-47698
An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials
8.1
CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
8.0
CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
8.0
CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive Information
