Read the docs

Optigo Networks

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Optigo Networks records in CISA KEV

No Optigo Networks vulnerabilities are listed in CISA KEV.

Records

6 records

Priority MEDIUM 49

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00749 Published 2025-05-06 No fix listed CWE-798
Priority MEDIUM 49

The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to an attacker authenticating without a password.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00509 Published 2024-10-03 No fix listed CWE-1390
Priority MEDIUM 49

The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, allowing an attacker to traverse directories, bypass authentication, and execute remote code.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00696 Published 2024-10-03 No fix listed CWE-98
Priority MEDIUM 48

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain contr…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00457 Published 2025-03-13 No fix listed CWE-288
Priority MEDIUM 44

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00395 Published 2025-03-13 No fix listed CWE-547
Open these records in search →