CVE-2025-53947
published 2025-09-18CVE-2025-53947: A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data…
PriorityP339high7.7CVSS 3.1
AVLACLPRNUINSUCNIHAH
EPSS
0.10%
1.2th percentile
A local attacker with low privileges on the Windows system where the
software is installed can exploit this vulnerability to corrupt
sensitive data. A data folder is created with very weak privileges,
allowing any user logged into the Windows system to modify its content.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cognex | in-sight_2000_series | 5.x – 6.5.1 | — |
| cognex | in-sight_7000_series | 5.x – 6.5.1 | — |
| cognex | in-sight_8000_series | 5.x – 6.5.1 | — |
| cognex | in-sight_9000_series | 5.x – 6.5.1 | — |
| cognex | in-sight_explorer | 5.x – 6.5.1 | — |
CVSS provenance
nvdv3.17.7HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv4.06.9MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Cognex In-Sight Explorer and In-Sight Camera Firmware
cisa_ics·2025-09-18·CVSS 8.0
[HIGH] Cognex In-Sight Explorer and In-Sight Camera Firmware
ICS Advisory
##
Cognex In-Sight Explorer and In-Sight Camera Firmware
Release DateSeptember 18, 2025
Alert CodeICSA-25-261-06
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.6
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Cognex
- Equipment: In-Sight Explorer, In-Sight Camera Firmware
- Vulnerabilities: Use of Hard-coded Password, Cleartext Transmission of Sensitive Information, Incorrect Default Permissions, Improper Restriction of Excessive Authentication Attempts, Incorrect Permission Assignment for Critical Resource, Authentication Bypass by Capture-replay, Client-Side Enforcement of Server-Side Security
## 2. RISK EVALUATION
Successful exploitati
GHSA
GHSA-65x9-r46v-g944: A local attacker with low privileges on the Windows system where the
software is installed can exploit this vulnerability to corrupt
sensitive data
ghsa_unreviewed·2025-09-18
CVE-2025-53947 [MEDIUM] CWE-276 GHSA-65x9-r46v-g944: A local attacker with low privileges on the Windows system where the
software is installed can exploit this vulnerability to corrupt
sensitive data
A local attacker with low privileges on the Windows system where the
software is installed can exploit this vulnerability to corrupt
sensitive data. A data folder is created with very weak privileges,
allowing any user logged into the Windows system to modify its content.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-09-18
Published