CVE-2025-66586highCWE-843

CVE-2025-66586: fallo de gravedad alta en AzeoTech DAQFactory

Type Confusion vulnerability in AzeoTech DAQFactory

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear DAQFactory

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.3epss 0.2%
In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
AzeoTech · DAQFactory
CVEs relacionadas — AzeoTech DAQFactory

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-42698HIGHAzeoTech DAQFactoryEPSS 0.8%CVE-2021-42543HIGHAzeoTech DAQFactoryEPSS 0.8%CVE-2021-42701MEDIUMAzeoTech DAQFactoryEPSS 0.6%CVE-2021-42699MEDIUMAzeoTech DAQFactoryEPSS 0.5%CVE-2025-66590HIGHOut-of-bounds Write vulnerability in AzeoTech DAQFactoryEPSS 0.4%CVE-2025-66589HIGHOut-of-bounds Read vulnerability in AzeoTech DAQFactoryEPSS 0.4%