CVE-2025-54860

HIGH

Cognex In-Sight Explorer & Camera Firmware - DoS

Title source: llm
STIX 2.1

Description

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a denial-of-service attack, leaving the telnet service into an unreachable state.

Scores

CVSS v3 7.7
EPSS 0.0002
EPSS Percentile 4.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-307
Status published
Products (5)
Cognex/In-Sight 2000 series 5.x - 6.5.1
Cognex/In-Sight 7000 series 5.x - 6.5.1
Cognex/In-Sight 8000 series 5.x - 6.5.1
Cognex/In-Sight 9000 series 5.x - 6.5.1
Cognex/In-Sight Explorer 5.x - 6.5.1
Published Sep 18, 2025
Tracked Since Feb 18, 2026