{"id":"CVE-2025-2080","aliases":["EUVD-2025-6369","GHSA-jqj3-fh4v-x7hj"],"status":"published","title":"Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool","description":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.","severity":{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00457,"percentile":0.39873,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-288"],"published":"2025-03-13T16:57:30Z","modified":"2026-08-26T13:41:33Z","products":[{"vendor":"optigo networks","product":"optigo visual networks capture tool"},{"vendor":"optigo networks","product":"visual bacnet capture tool"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-02","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2080"},{"url":"https://github.com/advisories/GHSA-jqj3-fh4v-x7hj"}],"sources":{"cve":[{"id":"CVE-2025-2080","title":"Authentication Bypass Using an Alternate Path or Channel in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture Tool","description":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.","status":"published","published":"2025-03-13T16:57:30.147Z","modified":"2026-08-26T13:41:33.219Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:32:38.70481Z"}],"euvd":[{"id":"EUVD-2025-6369","description":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.","status":"published","published":"2025-03-13T16:57:30Z","modified":"2026-08-26T13:41:33Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T18:01:31.267984Z"}],"ghsa":[{"id":"GHSA-jqj3-fh4v-x7hj","title":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1...","description":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.","status":"published","published":"2025-03-13T18:32:23Z","modified":"2025-03-13T18:32:29Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T15:00:16.082166Z"}],"nvd":[{"id":"CVE-2025-2080","description":"Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products.","status":"published","published":"2025-03-13T17:15:38.253Z","modified":"2026-06-17T09:06:15.937Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"}],"cwes":["CWE-288"],"updated_at":"2026-11-02T14:10:53.93104Z"}]}}