Description (CNA)
Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSystemConfig functionality to modify relevant device properties (such as network settings), contradicting the security model proposed in the user manual.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cognex / In-Sight 2000 series | affected 5.x through 6.5.1 |
| Cognex / In-Sight 7000 series | affected 5.x through 6.5.1 |
| Cognex / In-Sight 8000 series | affected 5.x through 6.5.1 |
| Cognex / In-Sight 9000 series | affected 5.x through 6.5.1 |
| Cognex / In-Sight Explorer | affected 5.x through 6.5.1 |
CWE
CWE-732
References
ADP enrichment
No English description supplied.
No references supplied.