CVE-2025-2080

CriticalCVSS 9.3/10Last modified Jun 17, 2026

Description

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.

Metrics

CVSS 4.0 9.3/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-288

Affected software

No affected versions have been published.

Timeline

Published
Mar 13, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-208007.8In mminfra, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malCVE-2025-208017.0In seninf, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege if a malicious acCVE-2025-208026.7In geniezone, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious aCVE-2025-208036.7In dpe, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege if a malicious acCVE-2025-208046.7In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2025-208056.7In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2025-208066.7In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2025-208076.7In dpe, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a malicious CVE-2025-20818.7Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonaCVE-2025-20827.5Tesla Model 3 VCSEC Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arCVE-2025-20836.4The Logo Carousel Gutenberg Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sliderId’ parameter in all versCVE-2025-20846.1A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected
CVE-2025-2080: Critical severity, CVSS 9.3 | Vulnix