Cognex develops industrial machine-vision and dimensioning systems, with its vulnerability exposure centered on the 3D-A1000 dimensioning platform and related OPC server products that automate visual inspection and measurement in manufacturing environments. The observed weakness classes—including client-side security enforcement, untrusted deserialization, improper log handling, and missing authentication on critical functions—reflect the integration and data-exchange demands of these industrial automation components. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cognex over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-32935CRITICAL The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permiss | May 23, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-1525CRITICAL The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow atta | Sep 6, 2022 | 9.1 | 29 | NO | NO |
CVE-2022-1368CRITICAL The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized | Sep 6, 2022 | 9.8 | 24 | NO | NO |
CVE-2022-1522MEDIUM The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to cr | Sep 6, 2022 | 5.3 | 20 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cognex.
Media articles that mention a CVE ID that affects a product developed by Cognex — matched by CVE ID, not by vendor name.