CybersecurityNetwork Security

Optigo Networks Visual BACnet and Capture Tool Overview

Analyst 207|
Optigo Networks Visual BACnet and Capture Tool Overview

1. EXECUTIVE SUMMARY

  • CVSS v4 9.3
  • ATTENTION: Exploitable remotely/low attack complexity
  • Vendor: Optigo Networks
  • Equipment: Visual BACnet Capture Tool, Optigo Visual Networks Capture Tool
  • Vulnerabilities: Use of Hard-coded, Security-relevant Constants, Authentication Bypass Using an Alternate Path or Channel

2. RISK EVALUATION

The vulnerabilities identified in the Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool pose significant risks. Successful exploitation could allow an attacker to bypass authentication mechanisms, gain unauthorized control over the products, or impersonate the web applications, leading to potential data breaches and operational disruptions.

3. TECHNICAL DETAILS

3.1 AFFECTED PRODUCTS

The vulnerabilities affect the following versions:

  • Visual BACnet Capture Tool: Version 3.1.2rc11
  • Optigo Visual Networks Capture Tool: Version 3.1.2rc11

3.2 VULNERABILITY OVERVIEW

3.2.1 USE OF HARD-CODED, SECURITY-RELEVANT CONSTANTS CWE-547

Both tools contain a hard-coded secret key, which could enable an attacker to generate valid JSON Web Token (JWT) sessions. This vulnerability is documented as CVE-2025-2079, with a CVSS v3.1 base score of 7.5 and a CVSS v4 score of 8.7.

3.2.2 AUTHENTICATION BYPASS USING AN ALTERNATE PATH OR CHANNEL CWE-288

The exposed web management service in these tools allows attackers to bypass authentication measures, gaining control over the utilities within the products. This vulnerability is identified as CVE-2025-2080, with a CVSS v3.1 base score of 9.8 and a CVSS v4 score of 9.3.

3.2.3 USE OF HARD-CODED, SECURITY-RELEVANT CONSTANTS CWE-547

This vulnerability allows an attacker to impersonate the web application service, potentially misleading victim clients. It is documented as CVE-2025-2081, with a CVSS v3.1 base score of 7.5 and a CVSS v4 score of 8.7.

3.3 BACKGROUND

  • CRITICAL INFRASTRUCTURE SECTORS: Information Technology
  • COUNTRIES/AREAS DEPLOYED: Worldwide
  • COMPANY HEADQUARTERS LOCATION: Canada

3.4 RESEARCHER

The vulnerabilities were reported to CISA by Tomer Goldschmidt of Claroty Team82.

4. MITIGATIONS

Optigo Networks recommends users upgrade to the following versions to mitigate the identified vulnerabilities:

CISA recommends additional defensive measures to minimize the risk of exploitation:

  • Minimize network exposure: Ensure control system devices are not accessible from the Internet.
  • Network isolation: Place control system networks and remote devices behind firewalls, isolating them from business networks.
  • Secure remote access: Use secure methods such as Virtual Private Networks (VPNs), while recognizing that VPNs may have vulnerabilities and should be kept updated.

CISA emphasizes the importance of conducting proper impact analysis and risk assessment before implementing defensive measures. Organizations are encouraged to follow established procedures for reporting suspected malicious activity to CISA.

No known public exploitation of these vulnerabilities has been reported to CISA at this time.

5. UPDATE HISTORY

  • March 11, 2025: Initial Publication
Cyber SecurityData BreachVulnerability Management
Related Intelligence

Continue Reading

Laptop on a minimalist desk with a potted plant and stack of paper in soft natural light.

WordPress Discloses Core Flaw Enabling Unauthenticated Code Execution

WordPress has patched a critical flaw that allowed hackers to execute code remotely without authentication, releasing versions 6.9.5 and 7.0.2 to fix the vulnerability. The update addresses a REST API batch-route confusion and SQL injection issue that could be triggered by a simple HTTP request.

Analyst 207
Rows of computer servers and networking equipment in a dimly lit data center with one server highlighted.

OpenSSL Flaw Exposes Servers to Memory Exhaustion Attacks

A newly discovered OpenSSL flaw, dubbed HollowByte, leaves unpatched servers vulnerable to memory exhaustion attacks, where a mere 11 bytes can trigger the allocation of up to 131 KB of memory for a message that never arrives. This tiny trigger can bring a server to its knees, freezing memory and blocking critical connections.

Analyst 207
Dimly lit server room with one server showing high memory usage.

OpenSSL Servers Vulnerable to Memory-Bloating DDoS Attacks

Beware: a simple 11-byte malicious input can cripple OpenSSL servers with a devastating DDoS attack, leaving them permanently bloated and vulnerable. This sneaky exploit, dubbed HollowByte, takes advantage of a weakness in OpenSSL's TLS handshake to drain server resources.

Analyst 207
Stack of vintage papers with handwritten notes and diagrams on a formal archive room table.

Turing's Voice Encryption System Uncovered in Wartime Papers

A treasure trove of wartime papers, known as the "Bayley papers," has surfaced in London, selling for nearly $500,000 and revealing groundbreaking details about Alan Turing's pioneering voice encryption system. This long-hidden collection has finally been transferred into the public sphere, offering historians and technologists a fascinating glimpse into Turing's secret work.

Analyst 207