CVE-2025-53947 HIGH

CVE-2025-53947: Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

Vendor Cognex
Product In-Sight 2000 series
Weakness CWE-276
Published September 18, 2025
Last update September 19, 2025

CVSS base score

7.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content.

Key dates

02Disclosure timeline

September 18, 2025 CVE published
September 19, 2025 Record updated