Elevation of Privilege in Firmware Upgrade for Vendor Product
CVE-2025-47698

8.6HIGH

Key Information:

Vendor

Cognex

Status
In-sight 2000 Series
In-sight 7000 Series
In-sight 8000 Series
In-sight 9000 Series
Vendor
CVE Published:
18 September 2025

What is CVE-2025-47698?

A vulnerability exists that allows an adjacent attacker to exploit a weakness during the firmware upgrade process. By doing so, they can retrieve user-privileged credentials without requiring authentication, posing a serious threat to system security and user data integrity. This risk emphasizes the need for secure firmware management practices and robust access controls.

Affected Version(s)

In-Sight 2000 series 5.x <= 6.5.1

In-Sight 7000 series 5.x <= 6.5.1

In-Sight 8000 series 5.x <= 6.5.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-2...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Diego Giubertoni of Nozomi Networks reported these vulnerabilities to CISA.
.
CVE-2025-47698 : Elevation of Privilege in Firmware Upgrade for Vendor Product