CVE-2022-1522

Published: Sep 6, 2022Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-117: Improper Output Neutralization for Logs, which allows an attacker to create false logs that show the password as having been changed when it is not, complicating forensics.

Affected (1)

Products: Cognex: 3d A1000 Dimensioning System Firmware

1 product

3d A1000 Dimensioning System Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cognex 3d A1000 Dimensioning System Firmware	Up to 1.0.3\(3354\)

Running on/with	Platform Versions
Cognex 3d A1000 Dimensioning System	All versions

Related CWEs

Improper Output Neutralization for Logs

The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.