编号撤回

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a stack buffer overflow vulnerability that originates from a stack buffer overflow when parsing a specially crafted .ctl file,...

PT-2025-50730

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 Build 2555 Description An Out-of-bounds Write issue exists in AzeoTech DAQFactory release 20.7 Build 2555. An attacker can exploit this to cause the program to write data beyond the boundaries of an allocated...

AzeoTech DAQFactory 缓冲区错误漏洞

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from an out-of-bounds read vulnerability that originates from out-of-bounds reading of memory buffer data, which can be exploited b...

EUVD-2017-14256

Malware in sbrugna...

EUVD-2009-4447

Malware in sbrugna...

EUVD-2017-4238

Malware in sbrugna...

CVE-2011-2956

AzeoTech DAQFactory before 5.85 Build 1842 does not perform authentication for certain signals, which allows remote attackers to cause a denial of service system reboot or shutdown via a signal...

CVE-2021-42703 AzeoTech DAQFactory

This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage, and performing unintended browser action...

CVE-2021-42701 AzeoTech DAQFactory

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle MiTM attack. This could allow an attacker to obtain credentials and take over the user’s cloud account...

CVE-2021-42543 AzeoTech DAQFactory

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown...

AzeoTech DAQFactory

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: AzeoTech Equipment: DAQFactory Vulnerabilities: Use of Inherently Dangerous Function, Deserialization of Untrusted Data, Cleartext Transmission of Sensitive Information, Modification of Assumed-Immutable Data MAID 2. RISK...

CVE-2017-12699

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones...

CVE-2017-5147

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path...

Default configuration

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones...

Path traversal

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path...

CVE-2017-12699

CVE-2017-12699 affects AzeoTech DAQFactory prior to 17.1. Two vulnerabilities are described: (1) Incorrect Default Permissions (CWE-276) allowing local, non-administrative users to replace or modify application files with malicious ones; (2) Uncontrolled Search Path Element (CWE-427) that could e...

CVE-2017-12699

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones...

CVE-2017-5147

CVE-2017-5147 describes an uncontrolled search path element vulnerability in AzeoTech DAQFactory before version 17.1. The issue allows a local attacker to have the program load a malicious DLL placed in the search path, potentially affecting integrity/availability. ICS-CERT/vulnerability details ...

CVE-2017-5147

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path...

AzeoTech DAQFactory Uncontrolled Search Path Element Vulnerability

AzeoTech DAQFactory is an HMI/SCADA software. AzeoTech DAQFactory suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute a malicious DLL file that has been placed in the search path...