Authentication bypass using an alternate path or channel in Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool - CVE-2025-2080
Published: March 24, 2025
Vulnerability identifier: #VU105954
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-2080
CWE-ID: CWE-288
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to the authentication bypass using an alternate path or channel. A remote attacker can bypass authentication measures and gain controls over utilities within the products.
Affected software
Visual BACnet Capture Tool
Optigo Visual Networks Capture Tool
Optigo Visual Networks Capture Tool
How to mitigate CVE-2025-2080
Install updates from vendor's website.
Visual BACnet Capture Tool - update to 3.1.3 rc8
Optigo Visual Networks Capture Tool - update to 3.1.3 rc8
Optigo Visual Networks Capture Tool - update to 3.1.3 rc8