CVE-2025-2080
Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.3
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.44%
- CWE
- CWE-288
- Published
- 2025-03-13
- Last modified
- 2026-08-26
Affected products
- Optigo Networks Visual BACnet Capture Tool
- Optigo Networks Optigo Visual Networks Capture Tool
Weakness type
Related vulnerabilities
- CVE-2026-20079 — Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
- CVE-2026-1603 — An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to
- CVE-2026-18577 — Incomplete patch leads to administrative account takeover
- CVE-2026-18556 — Unauthenticated administrative account takeover
- CVE-2026-28411 — WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
- CVE-2026-27842 — Authentication bypass issue exists in MR-GM5L-S1 and MR-GM5A-L1, which may allow an attacker to bypass authentication an
- CVE-2026-33950 — signalk-server: Privilege Escalation by Admin Role Injection via /enableSecurity
- CVE-2026-34040 — Moby has AuthZ plugin bypass when provided oversized request bodies