Cognex In-Sight 2000 up to 6.5.1 Service Port 1069 authentication replay

Summaryinfo

A vulnerability, which was classified as critical, has been found in Cognex In-Sight 2000, In-Sight 7000, In-Sight 8000, In-Sight 9000 and In-Sight Explorer up to 6.5.1. This issue affects some unknown processing of the component Service Port 1069. This manipulation causes authentication replay. This vulnerability is registered as CVE-2025-54810. The attack requires access to the local network. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Cognex In-Sight 2000, In-Sight 7000, In-Sight 8000, In-Sight 9000 and In-Sight Explorer up to 6.5.1. Affected by this vulnerability is an unknown functionality of the component Service Port 1069. The manipulation with an unknown input leads to a authentication replay vulnerability. The CWE definition for the vulnerability is CWE-294. A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes). As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform management operations such as modifying system properties. The user management functionality handles sensitive data such as registered usernames and passwords over an unencrypted channel, allowing an adjacent attacker to intercept valid credentials to gain access to the device.

The weakness was published by Diego Giubertoni as icsa-25-261-06. It is possible to read the advisory at cisa.gov. This vulnerability is known as CVE-2025-54810 since 08/06/2025. The exploitation appears to be easy. The attack can only be done within the local network. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/19/2025). The attack technique deployed by this issue is T1040 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Cognex

Name

• In-Sight 2000
• In-Sight 7000
• In-Sight 8000
• In-Sight 9000
• In-Sight Explorer

Version

• 6.5.0
• 6.5.1

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion