CVE-2025-2081: CWE-547 Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool in Optigo Networks Visual BACnet Capture Tool

CVE-2025-2081 is a vulnerability in Optigo Networks Visual BACnet Capture Tool version 3.1.2rc11 caused by the use of hard-coded, security-relevant constants (CWE-547). This weakness enables an attacker to impersonate the web application service, potentially misleading clients interacting with the tool. The vulnerability is remotely exploitable without authentication or user interaction, resulting in a high impact on availability. No official patch or remediation level has been provided by the vendor as of the publication date.

An attacker can impersonate the web application service, misleading victim clients. This can disrupt normal operations and potentially cause denial of service or misdirection of client requests. The vulnerability has a high CVSS score of 8.7, indicating significant impact on availability without requiring privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented. Users should monitor vendor communications for updates and consider limiting exposure of the affected version until a fix is available.