CVE-2025-2079 — Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks…

CVE-2025-2079

Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool PUBLISHED

Description (CNA)

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.

Affected (CNA)

Vendor / product	Versions
Optigo Networks / Visual BACnet Capture Tool	affected 3.1.2rc11
Optigo Networks / Optigo Visual Networks Capture Tool	affected 3.1.2rc11

CWE

CWE-547

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.