CyberzSOC

Publication detail
← Back to advisories & guidance

ICSA-25-070-02: Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool (Update A) ↗ source

March 11, 2025 CISA ICS Advisory
Source: https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02

Summary

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, gain control over the products, or impersonate the web applications. CVE-2025-2079: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions. CVE-2025-2080: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products. CVE-2025-2081: Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.

Advisory Details CISA ICS CSAF feed

Advisory ID
ICSA-25-070-02
Status
Final · version 2
Initial release
2025-03-11
Last revised
2026-08-25 (2 revisions)
Vendor
Optigo Networks
Critical infrastructure sectors
Information Technology
Deployed
Worldwide
Vendor headquarters
Canada

No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

Credit: Tomer Goldschmidt (Claroty Team82)

Affected products (2)
  • Visual BACnet Capture Tool — 3.1.2rc11
  • Optigo Visual Networks Capture Tool — 3.1.2rc11
Revision history (2)
  • 2026-08-25 — v2: Update A - Update to mitigation section
  • 2025-03-11 — v1: Initial Publication

From CISA's machine-readable CSAF 2.0 advisory (JSON).

Vulnerabilities as Stated by the Advisory

CVEWeaknessCVSS v3Details
CVE-2025-2080 CWE-288 Authentication Bypass Using an Alternate Path or Channel 9.8 Critical Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.

Vendor fix: Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.

Mitigation: Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version ↗

Mitigation: Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel & ARM) ↗

Affected, fixed & timeline

Affected:

  • Visual BACnet Capture Tool 3.1.2rc11
  • Optigo Visual Networks Capture Tool 3.1.2rc11
CVE-2025-2079 CWE-547 Use of Hard-coded, Security-relevant Constants 7.5 High Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.

Vendor fix: Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.

Mitigation: Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version ↗

Mitigation: Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel & ARM) ↗

Affected, fixed & timeline

Affected:

  • Visual BACnet Capture Tool 3.1.2rc11
  • Optigo Visual Networks Capture Tool 3.1.2rc11
CVE-2025-2081 CWE-547 Use of Hard-coded, Security-relevant Constants 7.5 High Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.

Vendor fix: Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.

Mitigation: Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version ↗

Mitigation: Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel & ARM) ↗

Affected, fixed & timeline

Affected:

  • Visual BACnet Capture Tool 3.1.2rc11
  • Optigo Visual Networks Capture Tool 3.1.2rc11

Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVECVSSAffected
CVE-2025-2080 9.3 Critical Optigo Networks Visual BACnet Capture Tool Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that c…
CVE-2025-2079 8.7 High Optigo Networks Visual BACnet Capture Tool Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allo…
CVE-2025-2081 8.7 High Optigo Networks Visual BACnet Capture Tool Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the …

Named by the advisory itself. Each CVE links to its tracked detail page.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.