CVE-2022-1525 CRITICAL

CVE-2022-1525: Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security

Vendor Cognex
Product 3D-A1000 Dimensioning System
Weakness CWE-602 · Client-side enforcement
Published September 6, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

9.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.

Key dates

02Disclosure timeline

September 6, 2022 CVE published
April 16, 2025 Record updated