Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Permission Assignment for Critical Resource
Cognex In-Sight Explorer and In-Sight Camera Firmware expose
a telnet-based service on port 23 to allow management operations such as
firmware upgrades and device reboots, which require authentication. A
user with protected privileges can successfully invoke the
SetSystemConfig functionality to modify relevant device properties (such
as network settings), contradicting the security model proposed in the
user manual.
Cognex reports that In-Sight Explorer based vision systems are legacy
products not intended for new applications. To reduce risk, asset owners
are advised to switch to next generation In-Sight Vision Suite based
vision systems, such as the In-Sight 2800, In-Sight 3800, In-Sight 8900
series embedded cameras.
Exploits
Credits
finder
Diego Giubertoni of Nozomi Networks reported these vulnerabilities to CISA.