Use of Hard-coded, Security-relevant Constants in Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool - CVE-2025-2081
Published: March 24, 2025
Vulnerability identifier: #VU105955
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-2081
CWE-ID: CWE-547
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to the affected application contains a hard coded secret key. A remote attacker can impersonate the web application service and mislead victim clients.
Affected software
Visual BACnet Capture Tool
Optigo Visual Networks Capture Tool
Optigo Visual Networks Capture Tool
How to mitigate CVE-2025-2081
Install updates from vendor's website.
Visual BACnet Capture Tool - update to 3.1.3 rc8
Optigo Visual Networks Capture Tool - update to 3.1.3 rc8
Optigo Visual Networks Capture Tool - update to 3.1.3 rc8