CVE-2025-54860CWE-307

CVE-2025-54860

High · published September 19, 2025

CVSS v3.1
7.7
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow

management operations on the device such as firmware upgrades and device

reboot requiring an authentication. A wrong management of login

failures of the service allows a denial-of-service attack, leaving the telnet service

into an unreachable state.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00136 · 2.8th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2025-09-19T02:15Z
References (1)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-06 · [email protected]
EPSS history
Timeline
  • 18 SEP 21:20Z
    Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts
    cvelistv5