What’s Vulnerable › Vulnerabilities

CVE-2025-2079: Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-13 · updated 2026-06-17
• Weakness: CWE-547

Description

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.

Affected products

• Optigo Networks Optigo Visual Networks Capture Tool: 3.1.2rc11
• Optigo Networks Visual BACnet Capture Tool: 3.1.2rc11

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02

Get alerted when CVE-2025-2079 or the next vulnerability affects your stack