Cognex In-Sight OPC Server Deserialization of Untrusted Data (CVE-2021-32935)

The affected Cognex product, the In-Sight OPC Server versions v5.7.4 96 and prior, deserializes untrusted data, which could allow a remote attacker access to system level permission commands and local privilege escalation. This plugin only works with Tenable.ot. Please visit...

CVE-2021-32935

creationtimestamp| type| source ---|---|--- 2022-05-23 22:35:53+00:00| seen| https://t.me/cibsecurity/43187...

CVE-2021-32935

CVE-2021-32935 affects Cognex In-Sight OPC Server (v5.7.4 (96) and prior). The vulnerability is Deserialization of Untrusted Data (CWE-502) in the OPC Server, allowing a remote attacker to execute system-level commands and achieve local privilege escalation. CVSS v3.1 base score 9.8 (CRITICAL) pe...

Cognex In-Sight OPC Server

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Cognex Equipment: In-Sight OPC Server Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker access to system...