EUVD-2025-13635

Malicious code in bioql PyPI...

EUVD-2025-6371

Malicious code in bioql PyPI...

EUVD-2025-6369

Malicious code in bioql PyPI...

EUVD-2025-6368

Malicious code in bioql PyPI...

CVE-2025-4041

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions...

CVE-2025-4041

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions...

CVE-2025-4041 Use of Hard-coded Credentials Optigo Networks ONS NC600

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions...

CVE-2025-4041 Use of Hard-coded Credentials Optigo Networks ONS NC600

In Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, an attacker could connect with the device's ssh server and utilize the system's components to perform OS command executions...

CVE-2025-4041

Optigo Networks ONS NC600, versions 4.2.1-084 through 4.7.2-330, are affected by CVE-2025-4041. An attacker who can access the device’s SSH service could leverage system components to execute OS commands on the device. The impact is consistent with a remote command execution risk affecting availa...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on May 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-126-01 Optigo Networks ONS NC600 ICSA-25-126-02 Milesight UG65-868M-EA ICSA-25-126-03...

Optigo Networks ONS NC600 信任管理问题漏洞

The Optigo Networks ONS NC600 is a professional building automation network controller from Optigo Networks designed as a security gateway for BACnet/IP and MS/TP networks. A trust management issue vulnerability exists in the Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, which...

PT-2025-19913 · Optigo Networks · Optigo Networks Ons Nc600

Name of the Vulnerable Software and Affected Versions: Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330 Description: An issue exists where an attacker could connect to the device's ssh server and utilize the system's components to perform OS command executions. Recommendations: For...

CVE-2025-2079

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

CVE-2025-2080

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products...

CVE-2025-2081

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients...

CVE-2025-2080

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain an exposed web management service that could allow an attacker to bypass authentication measures and gain controls over utilities within the products...

CVE-2025-2079

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 contain a hard coded secret key. This could allow an attacker to generate valid JWT JSON Web Token sessions...

CVE-2025-2081

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients...

CVE-2025-2081

CVE-2025-2081 affects Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool (version 3.1.2rc11). The vulnerability arises from an impersonation of the web application service, enabling misdirection of victim clients. Related ICS/CISA documentation notes a hard-coded s...

CVE-2025-2081

Optigo Networks Visual BACnet Capture Tool and Optigo Visual Networks Capture Tool version 3.1.2rc11 are vulnerable to an attacker impersonating the web application service and mislead victim clients...