CVE-2025-2079

HighCVSS 8.7/10Last modified Jun 17, 2026

Description

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT (JSON Web Token) sessions.

Metrics

CVSS 4.0 8.7/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-547

Affected software

VendorProductVersions
Optigo NetworksVisual BACnet Capture Tool3.1.2rc11
Optigo NetworksOptigo Visual Networks Capture Tool3.1.2rc11

References

Timeline

Published
Mar 13, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-207905.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2025-207916.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connectCVE-2025-207925.3In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2025-207936.5In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has connectCVE-2025-207946.5In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connecCVE-2025-207957.8In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a CVE-2025-207967.8In imgsys, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege if a mCVE-2025-207977.8In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207987.8In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-207997.8In c2ps, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor CVE-2025-20809.3Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management serviCVE-2025-208007.8In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a mal
CVE-2025-2079: High severity, CVSS 8.7 | Vulnix