3d-a1000 Dimensioning System Firmware vulnerabilities

2 known vulnerabilities in 3d-a1000 Dimensioning System Firmware from Cognex. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  3D-A1000 Dimensioning System: Client-Side Enforcement of Server-Side Security

  CVE-2022-1525Sep 6, 2022Cognex

  The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code

• 9.8 Critical severity

  3D-A1000 Dimensioning System: Missing Authentication for Critical Functionality

  CVE-2022-1368Sep 6, 2022Cognex

  The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitor