Cognex 3D-A1000 Dimensioning System
Successful exploitation of these vulnerabilities could result in unauthorized password changes, escalation of privileges, falsifying of password logs, and bypassing of web access controls.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-1525US | critical9.1 | — | ||
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow atta… | ||||
| CVE-2022-1522US | medium5.3 | — | ||
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to cr… | ||||
| CVE-2022-1368US | critical9.8OT elevated | — | ||
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-249-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support - MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support - MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan