{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2025-2080",
        "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "state": "PUBLISHED",
        "assignerShortName": "icscert",
        "dateReserved": "2025-03-06T22:01:47.991Z",
        "datePublished": "2025-03-13T16:57:30.147Z",
        "dateUpdated": "2026-08-26T13:41:33.219Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
                "shortName": "icscert",
                "dateUpdated": "2026-08-26T13:41:33.219Z"
            },
            "title": "Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool",
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "cweId": "CWE-288",
                            "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel",
                            "type": "CWE"
                        }
                    ]
                }
            ],
            "affected": [
                {
                    "vendor": "Optigo Networks",
                    "product": "Visual BACnet Capture Tool",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.1.2rc11"
                        }
                    ],
                    "defaultStatus": "unaffected"
                },
                {
                    "vendor": "Optigo Networks",
                    "product": "Optigo Visual Networks Capture Tool",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "3.1.2rc11"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }
            ],
            "descriptions": [
                {
                    "lang": "en",
                    "value": "Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p></p>\n\n<p>Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.</p>"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02",
                    "tags": [
                        "government-resource"
                    ]
                }
            ],
            "metrics": [
                {
                    "format": "CVSS",
                    "scenarios": [
                        {
                            "lang": "en",
                            "value": "GENERAL"
                        }
                    ],
                    "cvssV4_0": {
                        "attackVector": "NETWORK",
                        "attackComplexity": "LOW",
                        "attackRequirements": "NONE",
                        "privilegesRequired": "NONE",
                        "userInteraction": "NONE",
                        "vulnConfidentialityImpact": "HIGH",
                        "subConfidentialityImpact": "NONE",
                        "vulnIntegrityImpact": "HIGH",
                        "subIntegrityImpact": "NONE",
                        "vulnAvailabilityImpact": "HIGH",
                        "subAvailabilityImpact": "NONE",
                        "exploitMaturity": "NOT_DEFINED",
                        "Safety": "NOT_DEFINED",
                        "Automatable": "NOT_DEFINED",
                        "Recovery": "NOT_DEFINED",
                        "valueDensity": "NOT_DEFINED",
                        "vulnerabilityResponseEffort": "NOT_DEFINED",
                        "providerUrgency": "NOT_DEFINED",
                        "version": "4.0",
                        "baseSeverity": "CRITICAL",
                        "baseScore": 9.3,
                        "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                    }
                }
            ],
            "solutions": [
                {
                    "lang": "en",
                    "value": "Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.\n\n  *  \n\nWindows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version\n\n\n  *  \n\nLinux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel & ARM)",
                    "supportingMedia": [
                        {
                            "type": "text/html",
                            "base64": false,
                            "value": "<p>Optigo Networks recommends users to upgrade to the following Ubuntu or Windows versions of Optigo Visual Networks Capture Tool version 3.2.1.80.</p><ul><li><p>Windows: https://optigo.zendesk.com/hc/en-us/articles/47648910851725-Optigo-Networks-Capture-Tool-Windows-3-2-1-80-Current-Version</p></li><li><p>Linux: https://optigo.zendesk.com/hc/en-us/articles/47649041422861-Optigo-Networks-Capture-Tool-Linux-Ubuntu-3-2-1-80-Current-Version (Ubuntu - Intel &amp; ARM)</p></li></ul>"
                        }
                    ]
                }
            ],
            "credits": [
                {
                    "lang": "en",
                    "value": "Tomer Goldschmidt of Claroty Team82",
                    "type": "finder"
                }
            ],
            "source": {
                "discovery": "UNKNOWN"
            },
            "x_generator": {
                "engine": "Vulnogram 0.2.0"
            }
        },
        "adp": [
            {
                "metrics": [
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2025-03-13T18:46:34.960491Z",
                                "id": "CVE-2025-2080",
                                "options": [
                                    {
                                        "Exploitation": "none"
                                    },
                                    {
                                        "Automatable": "yes"
                                    },
                                    {
                                        "Technical Impact": "total"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2025-03-13T18:46:42.625Z"
                }
            }
        ]
    }
}