CVE-2022-1525— Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-1525
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
服务端安全的客户端实施
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cognex 3D-A1000 Dimensioning System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cognex 3D-A1000 Dimensioning System是美国Cognex公司的一款紧凑型工业智能相机能够捕捉 3D 和 2D 的移动物体。 Cognex 3D-A1000 Dimensioning System 1.0.3 (3354)版本及之前版本存在安全漏洞。攻击者利用该漏洞可以绕过 Web 访问控制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cognex | 3D-A1000 Dimensioning System | all ~ 1.0.3 (3354) | - |
II. Public POCs for CVE-2022-1525
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-1525
请登录查看更多情报信息。
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-1525
Same Patch Batch · Cognex · 2022-09-06 · 3 CVEs total
| CVE-2022-1368 | 9.8 CRITICAL | Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function |
| CVE-2022-1522 | 5.3 MEDIUM | Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs |
IV. Related Vulnerabilities
Same vendor: Cognex
- CVE-2025-53969
Cognex In-Sight Explorer and In-Sight Camera Firmware Client - CVE-2025-54810
Cognex In-Sight Explorer and In-Sight Camera Firmware Authen - CVE-2025-54818
Cognex In-Sight Explorer and In-Sight Camera Firmware Cleart - CVE-2025-54497
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorr - CVE-2025-52873
Cognex In-Sight Explorer and In-Sight Camera Firmware Incorr
Same weakness: CWE-602
- CVE-2026-42160
Data Space Portal: Incorrect Authorization and Client-Side E - CVE-2026-39415
Frappe Learning Management System has Client-Side Manipulati - CVE-2026-25737
Budibase Arbitrary File Upload Leading to Multiple Critical - CVE-2026-30783
RustDesk Client Can Orphan API Channel to Ignore All Admin C - CVE-2026-23859
Dell Wyse Management Suite WMS 安全漏洞
V. Comments for CVE-2022-1525
No comments yet