Search

Find a vulnerability

Search criteria

    6 vulnerabilities found for Optigo Visual Networks Capture Tool by Optigo Networks

    CVE-2025-2081 (GCVE-0-2025-2081)

    Vulnerability from nvd – Published: 2025-03-13 17:00 – Updated: 2026-08-26 13:43
    VLAI
    Title
    Use of Hard-Coded, Security-Relevant Constants
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:42 UTC
    CWE
    • CWE-547 - Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2081",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:42:48.492300Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:42:58.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\n\n\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.\u003c/p\u003e\n\n\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-547",
              "description": "CWE-547 Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:43:01.114Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use of Hard-Coded, Security-Relevant Constants",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2081",
    "datePublished": "2025-03-13T17:00:03.146Z",
    "dateReserved": "2025-03-06T22:01:49.726Z",
    "dateUpdated": "2026-08-26T13:43:01.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-2080 (GCVE-0-2025-2080)

    Vulnerability from nvd – Published: 2025-03-13 16:57 – Updated: 2026-08-26 13:41
    VLAI
    Title
    Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.
    Severity
    9.3 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:46 UTC
    CWE
    • CWE-288 - Authentication Bypass Using an Alternate Path or Channel
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2080",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:46:34.960491Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:46:42.625Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\n\n\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.\u003c/p\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:41:33.219Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2080",
    "datePublished": "2025-03-13T16:57:30.147Z",
    "dateReserved": "2025-03-06T22:01:47.991Z",
    "dateUpdated": "2026-08-26T13:41:33.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-2079 (GCVE-0-2025-2079)

    Vulnerability from nvd – Published: 2025-03-13 16:55 – Updated: 2026-08-26 13:43
    VLAI
    Title
    Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:49 UTC
    CWE
    • CWE-547 - Use of Hard-Coded, Security-Relevant Constants
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2079",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:49:38.525761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:49:46.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.\u003c/p\u003e\u003cbr\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-547",
              "description": "CWE-547 Use of Hard-Coded, Security-Relevant Constants",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:43:29.864Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2079",
    "datePublished": "2025-03-13T16:55:27.567Z",
    "dateReserved": "2025-03-06T22:01:46.732Z",
    "dateUpdated": "2026-08-26T13:43:29.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-2081 (GCVE-0-2025-2081)

    Vulnerability from cvelistv5 – Published: 2025-03-13 17:00 – Updated: 2026-08-26 13:43
    VLAI
    Title
    Use of Hard-Coded, Security-Relevant Constants
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:42 UTC
    CWE
    • CWE-547 - Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2081",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:42:48.492300Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:42:58.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\n\n\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.\u003c/p\u003e\n\n\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-547",
              "description": "CWE-547 Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:43:01.114Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use of Hard-Coded, Security-Relevant Constants",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2081",
    "datePublished": "2025-03-13T17:00:03.146Z",
    "dateReserved": "2025-03-06T22:01:49.726Z",
    "dateUpdated": "2026-08-26T13:43:01.114Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-2080 (GCVE-0-2025-2080)

    Vulnerability from cvelistv5 – Published: 2025-03-13 16:57 – Updated: 2026-08-26 13:41
    VLAI
    Title
    Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.
    Severity
    9.3 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:46 UTC
    CWE
    • CWE-288 - Authentication Bypass Using an Alternate Path or Channel
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2080",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:46:34.960491Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:46:42.625Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\n\n\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.\u003c/p\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-288",
              "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:41:33.219Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2080",
    "datePublished": "2025-03-13T16:57:30.147Z",
    "dateReserved": "2025-03-06T22:01:47.991Z",
    "dateUpdated": "2026-08-26T13:41:33.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-2079 (GCVE-0-2025-2079)

    Vulnerability from cvelistv5 – Published: 2025-03-13 16:55 – Updated: 2026-08-26 13:43
    VLAI
    Title
    Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool
    Summary
    Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-03-13 18:49 UTC
    CWE
    • CWE-547 - Use of Hard-Coded, Security-Relevant Constants
    Assigner
    References
    Impacted products
    Credits
    Tomer Goldschmidt of Claroty Team82
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-2079",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-13T18:49:38.525761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T18:49:46.725Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Visual BACnet Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Optigo Visual Networks Capture Tool",
          "vendor": "Optigo Networks",
          "versions": [
            {
              "status": "affected",
              "version": "3.1.2rc11"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tomer Goldschmidt of Claroty Team82"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.\u003c/p\u003e\u003cbr\u003e"
            }
          ],
          "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-547",
              "description": "CWE-547 Use of Hard-Coded, Security-Relevant Constants",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T13:43:29.864Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOptigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\u003c/p\u003e\u003cul\u003e\u003cli\u003e\u003cp\u003eWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026amp; ARM)\u003c/p\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel \u0026 ARM)"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2025-2079",
    "datePublished": "2025-03-13T16:55:27.567Z",
    "dateReserved": "2025-03-06T22:01:46.732Z",
    "dateUpdated": "2026-08-26T13:43:29.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}