Priority MEDIUM 51
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account pa…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00993 · Published 2022-09-06 · No fix listed CWE-306
Priority MEDIUM 49
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by i…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00867 · Published 2022-09-06 · No fix listed CWE-602
Priority MEDIUM 47
The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalat…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01894 · Published 2022-05-23 · No fix listed CWE-502
Priority LOW 39
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties.
CVSS 4.0HIGH 8.6· Adjacent network · No auth · User interaction · EPSS 0.00204 · Published 2025-09-18 · No fix listed CWE-294
Priority LOW 39
An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software.
CVSS 4.0HIGH 8.6· Adjacent network · No auth · User interaction · EPSS 0.00251 · Published 2025-09-18 · No fix listed CWE-259
Priority LOW 39
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port 1069 to allow the client-side software, such as the In-Sight Explorer tool, to perform management ope…
CVSS 4.0HIGH 8.6· Adjacent network · Low privileges · No interaction · EPSS 0.00413 · Published 2025-09-18 · No fix listed CWE-602
Priority LOW 38
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties.
CVSS 4.0HIGH 8.6· Adjacent network · No auth · User interaction · EPSS 0.00147 · Published 2025-09-18 · No fix listed CWE-319
Priority LOW 38
An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials.
CVSS 4.0HIGH 8.6· Adjacent network · No auth · User interaction · EPSS 0.00139 · Published 2025-09-18 · No fix listed CWE-319
Priority LOW 34
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00318 · Published 2025-09-18 · No fix listed CWE-732
Priority LOW 34
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2025-09-18 · No fix listed CWE-732
Priority LOW 31
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication…
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00136 · Published 2025-09-18 · No fix listed CWE-307
Priority LOW 31
A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data.
CVSS 4.0MEDIUM 6.9· Local · Low privileges · No interaction · EPSS 0.00113 · Published 2025-09-18 · No fix listed CWE-276
Priority LOW 31
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password a…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00585 · Published 2022-09-06 · No fix listed CWE-117