CVE-2025-54754highCWE-259

CVE-2025-54754: falha de alta gravidade em Cognex In-Sight Explorer

Cognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar In-Sight 2000 series+ Monitorar In-Sight 7000 series

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.3%
An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software. This password can then be used to decrypt sensitive network traffic, affecting the Cognex device.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Cognex · In-Sight 2000 seriesCognex · In-Sight 7000 seriesCognex · In-Sight 8000 seriesCognex · In-Sight 9000 seriesCognex · In-Sight Explorer
CVEs relacionadas — Cognex In-Sight Explorer

No mesmo produto, das mais perigosas para as menos.

CVE-2025-53969HIGHCognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side SecurityEPSS 0.4%CVE-2025-52873HIGHCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical ResourceEPSS 0.3%CVE-2025-54497HIGHCognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical ResourceEPSS 0.3%CVE-2025-54810HIGHCognex In-Sight Explorer and In-Sight Camera Firmware Authentication Bypass by Capture-replayEPSS 0.2%CVE-2025-54818HIGHCognex In-Sight Explorer and In-Sight Camera Firmware Cleartext Transmission of Sensitive InformationEPSS 0.1%CVE-2025-47698HIGHCVE-2025-47698EPSS 0.1%