Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Cognex Component: 3d-a1000 Dimensioning System Firmware Clear all filters
TI-2022-01398 CVE-2022-1525 · GHSA-7j7j-4588-wpj2

Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security

Priority MEDIUM 49

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by i…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00867 Published 2022-09-06 No fix listed CWE-602
TI-2022-01395 CVE-2022-1522 · GHSA-j3gr-58v5-64m3

Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

Priority LOW 31

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password a…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00585 Published 2022-09-06 No fix listed CWE-117
TI-2022-01249 CVE-2022-1368 · GHSA-j7fp-3pf5-h6cj

Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function

Priority MEDIUM 51

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account pa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00993 Published 2022-09-06 No fix listed CWE-306