CVE-2025-54810CWE-294

CVE-2025-54810

High · published September 19, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

Cognex In-Sight Explorer and In-Sight Camera Firmware expose

a proprietary protocol on TCP port 1069 to perform management operations

such as modifying system properties. The user management functionality

handles sensitive data such as registered usernames and passwords over

an unencrypted channel, allowing an adjacent attacker to intercept valid

credentials to gain access to the device.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2025-09-19T02:15Z
References (1)
EPSS history
Timeline
  • 18 SEP 21:28Z
    Cognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replay
    cvelistv5