Lucene search
K

39 matches found

Positive Technologies
Positive Technologies
added 2026/06/18 12:0 a.m.14 views

PT-2026-50774

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory versions prior to 21.2 Description A Type Confusion issue exists where an attacker can use specially crafted .ctl files to achieve arbitrary code execution. Type Confusion occurs when a program accesses a resource using a...

8.4CVSS6.1AI score0.00148EPSS
Exploits0References6
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.3 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.0018EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:0 a.m.2 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00312EPSS
Exploits0References1
CNVD
CNVD
added 2025/12/15 12:0 a.m.3 views

AzeoTech DAQFactory Stack Buffer Overflow Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a stack buffer overflow vulnerability that originates from a stack buffer overflow when parsing a specially crafted .ctl file,...

7.3CVSS7.7AI score0.00022EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.3 views

CVE-2025-66587

In AzeoTech DAQFactory release 20.7 Build 2555, the affected application is vulnerable to memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS7.4AI score0.00022EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.4 views

CVE-2025-66584

In AzeoTech DAQFactory release 20.7 Build 2555, a Stack-Based Buffer Overflow vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS7.4AI score0.00022EPSS
Exploits0References1
NVD
NVD
added 2025/12/11 9:15 p.m.3 views

CVE-2025-66584

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00022EPSS
Exploits0
OSV
OSV
added 2025/12/11 9:15 p.m.1 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a Use After Free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.00193EPSS
Exploits0References1
NVD
NVD
added 2025/12/11 9:15 p.m.4 views

CVE-2025-66587

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00022EPSS
Exploits0
NVD
NVD
added 2025/12/11 9:15 p.m.5 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00193EPSS
Exploits0References2
CVE
CVE
added 2025/12/11 8:58 p.m.8 views

CVE-2025-66584

CVE-2025-66584 entry is rejected by its CVE Numbering Authority.

7AI score0.00022EPSS
Exploits0
EUVD
EUVD
added 2025/12/11 8:58 p.m.4 views

EUVD-2025-202854

In AzeoTech DAQFactory release 20.7 Build 2555, a Stack-Based Buffer Overflow vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.9AI score0.00022EPSS
Exploits0References2
CVE
CVE
added 2025/12/11 8:56 p.m.10 views

CVE-2025-66585

CVE-2025-66585 affects AzeoTech DAQFactory release 20.7 (Build 2555). A Use-After-Free vulnerability during parsing of specially crafted .ctl files can cause memory corruption and may allow code execution in the current process. Vendor/ICS advisories confirm local attack Vector with high impact t...

7.8CVSS7.3AI score0.00193EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/11 8:56 p.m.17 views

CVE-2025-66585 Use After Free vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00193EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/11 8:56 p.m.2 views

CVE-2025-66585 Use After Free vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00193EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/11 8:56 p.m.3 views

EUVD-2025-202857

In AzeoTech DAQFactory release 20.7 Build 2555, a Use After Free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.8AI score0.00193EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/11 8:54 p.m.18 views

CVE-2025-66586 Type Confusion vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.0018EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/11 8:54 p.m.3 views

EUVD-2025-202859

In AzeoTech DAQFactory release 20.7 Build 2555, an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.9AI score0.0018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/11 8:53 p.m.1 views

CVE-2025-66587

...

6.3AI score0.00022EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.5 views

PT-2025-50737

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 Build 2555 Description AzeoTech DAQFactory release 20.7 Build 2555 contains a flaw related to improper handling of resources. Specifically, an Access of Resource Using Incompatible Type issue exists when...

7.8CVSS7.1AI score0.0018EPSS
Exploits0References11
Rows per page
Query Builder