CVE-2025-52873CWE-732

CVE-2025-52873

High · published September 19, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

Cognex In-Sight Explorer and In-Sight Camera Firmware expose

a telnet-based service on port 23 to allow management operations such as

firmware upgrades and device reboots, which require authentication. A

user with protected privileges can successfully invoke the

SetSystemConfig functionality to modify relevant device properties (such

as network settings), contradicting the security model proposed in the

user manual.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-09-19T02:15Z
References (1)
EPSS history
Timeline
  • 18 SEP 21:22Z
    Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
    cvelistv5