Description
Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Optigo Networks | Visual BACnet Capture Tool | 3.1.2rc11 | — |
| Optigo Networks | Optigo Visual Networks Capture Tool | 3.1.2rc11 | — |
Advisories 1
- ICSA-25-070-02 Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A) CISA ICS & IT advisories · Aug 25, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02 government-resource