Skip to content
OpenAdvisories
Critical ICSA-25-070-02 3 CVEs

Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A)

Published Mar 11, 2025 · Updated Aug 25, 2026 · Revision 2

Vendor: Optigo Networks Product: Optigo Visual Networks Capture Tool Product: Visual BACnet Capture Tool

Summary

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications.

Vulnerabilities 3

  • Critical 9.3
    CVE-2025-2080

    Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.

    Optigo Networks Visual BACnet Capture Tool Optigo Visual Networks Capture Tool
  • High 8.7
    CVE-2025-2079

    Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.

    Optigo Networks Optigo Visual Networks Capture Tool Visual BACnet Capture Tool
  • High 8.7
    CVE-2025-2081

    Use of Hard-Coded, Security-Relevant Constants

    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.

    Optigo Networks Visual BACnet Capture Tool Optigo Visual Networks Capture Tool

Revision history

  1. #2

    Update A - Update to mitigation section

  2. #1

    Initial Publication

References