CVE-2022-1522 MEDIUM

CVE-2022-1522: Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs

Vendor Cognex
Product 3D-A1000 Dimensioning System
Weakness CWE-117
Published September 6, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.

Key dates

02Disclosure timeline

September 6, 2022 CVE published
April 16, 2025 Record updated