IM
IronMonkey Threat Research
‹ Back to ICS Advisories

Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A)

CRITICAL
CVSS 9.8
Date 2026-08-25T06:00:00+00:00
Source cisa-csaf
Published by CISA

// Description

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications.

// Vulnerabilities (3)

CVE ID CVSS Score Severity Description
CVE-2025-2079 7.5 high
Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.
CVE-2025-2080 9.8 critical
Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.
CVE-2025-2081 7.5 high
Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.

// Remediations (3)

Mitigation: Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linu
Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel & ARM)
Mitigation: Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Wi
Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version
Patch: Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Vi
Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.

// References