https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-1525.htmlhttps://patchthecve.com/cve/CVE-2022-1525.htmlWed, 17 Jun 2026 04:22:36 +0000CRITICAL 9.1: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.https://patchthecve.com/cve/CVE-2022-1522.htmlhttps://patchthecve.com/cve/CVE-2022-1522.htmlWed, 17 Jun 2026 04:22:36 +0000MEDIUM 5.3: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.https://patchthecve.com/cve/CVE-2022-1368.htmlhttps://patchthecve.com/cve/CVE-2022-1368.htmlWed, 17 Jun 2026 04:22:18 +0000CRITICAL 9.8: The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an unhttps://patchthecve.com/cve/CVE-2021-32935.htmlhttps://patchthecve.com/cve/CVE-2021-32935.htmlWed, 17 Jun 2026 03:53:49 +0000HIGH 8.8: The affected Cognex product, the In-Sight OPC Server versions v5.7.4 (96) and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation.