Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool Authentication Bypass Vulnerability Allowing Impersonation of Web Application Service

An authentication bypass vulnerability has been identified in Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool, both in version 3.1.2rc11. This vulnerability allows an attacker to impersonate the web application service, potentially misleading victim clients. The issue arises from an exposed web management service that can be exploited to bypass authentication measures and gain control over certain utilities within the products.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication bypass, allowing attackers to gain control over the affected products and impersonate the web application service to mislead clients.

Remediation

Optigo Networks recommends users upgrade to Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.3rc8.