Lucene search
K

38 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.3 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.0018EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.2 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00312EPSS
Exploits0References1
CNVD
CNVD
added 2025/12/15 12:0 a.m.2 views

AzeoTech DAQFactory Stack Buffer Overflow Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a stack buffer overflow vulnerability that originates from a stack buffer overflow when parsing a specially crafted .ctl file,...

7.3CVSS7.7AI score0.00022EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.3 views

CVE-2025-66587

In AzeoTech DAQFactory release 20.7 Build 2555, the affected application is vulnerable to memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS7.4AI score0.00022EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.4 views

CVE-2025-66584

In AzeoTech DAQFactory release 20.7 Build 2555, a Stack-Based Buffer Overflow vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS7.4AI score0.00022EPSS
Exploits0References1
OSV
OSV
added 2025/12/11 9:15 p.m.1 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a Use After Free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.00193EPSS
Exploits0References1
NVD
NVD
added 2025/12/11 9:15 p.m.3 views

CVE-2025-66584

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00022EPSS
Exploits0
NVD
NVD
added 2025/12/11 9:15 p.m.3 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00193EPSS
Exploits0References2
NVD
NVD
added 2025/12/11 9:15 p.m.3 views

CVE-2025-66587

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00022EPSS
Exploits0
CVE
CVE
added 2025/12/11 8:58 p.m.8 views

CVE-2025-66584

CVE-2025-66584 entry is rejected by its CVE Numbering Authority.

7AI score0.00022EPSS
Exploits0
EUVD
EUVD
added 2025/12/11 8:58 p.m.4 views

EUVD-2025-202854

In AzeoTech DAQFactory release 20.7 Build 2555, a Stack-Based Buffer Overflow vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.9AI score0.00022EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/11 8:56 p.m.16 views

CVE-2025-66585 Use After Free vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00193EPSS
Exploits0References2
CVE
CVE
added 2025/12/11 8:56 p.m.10 views

CVE-2025-66585

CVE-2025-66585 affects AzeoTech DAQFactory release 20.7 (Build 2555). A Use-After-Free vulnerability during parsing of specially crafted .ctl files can cause memory corruption and may allow code execution in the current process. Vendor/ICS advisories confirm local attack Vector with high impact t...

7.8CVSS7.3AI score0.00193EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/11 8:56 p.m.2 views

CVE-2025-66585 Use After Free vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00193EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/11 8:56 p.m.3 views

EUVD-2025-202857

In AzeoTech DAQFactory release 20.7 Build 2555, a Use After Free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.8AI score0.00193EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/11 8:54 p.m.17 views

CVE-2025-66586 Type Confusion vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.0018EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/11 8:54 p.m.3 views

EUVD-2025-202859

In AzeoTech DAQFactory release 20.7 Build 2555, an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.9AI score0.0018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/11 8:53 p.m.1 views

CVE-2025-66587

...

6.3AI score0.00022EPSS
Exploits0
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.1 views

AzeoTech DAQFactory 资源管理错误漏洞

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a release-after-use vulnerability that originates from a release-after-reuse vulnerability in the parsing of a specially craft...

7.8CVSS7.3AI score0.00193EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.4 views

PT-2025-50736

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 Build 2555 Description A Use After Free issue exists in AzeoTech DAQFactory release 20.7 Build 2555. Exploitation of this issue, through the parsing of specially crafted .ctl files, can lead to memory corruptio...

7.8CVSS6.9AI score0.00193EPSS
Exploits0References8
Rows per page
Query Builder