ICSA-22-249-03

Cognex 3D-A1000 Dimensioning System

Advisory ansehen veröffentlicht 2022-09-06

Successful exploitation of these vulnerabilities could result in unauthorized password changes, escalation of privileges, falsifying of password logs, and bypassing of web access controls.

beschreibt (3)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-1525US	critical9.1	0.83% (57th)	—	2022-09-06
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow atta…
CVE-2022-1522US	medium5.3	0.56% (46th)	—	2022-09-06
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to cr…
CVE-2022-1368US	critical9.8OT erhöht	0.95% (61st)	—	2022-09-06
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (3)

MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support
MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support
MitigationCognex 3D-A1000 Dimensioning System
Cognex has reportedly fixed these issues in release 1.2 PR2. For more information, users should contact Cognex support (login required).
https://www.cognex.com/en/support

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan