Lucene search
+L

140 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/12/19 12:00 a.m.11 views

AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.3AI score0.00354EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:00 a.m.13 views

AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00383EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:00 a.m.11 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:00 a.m.18 views

AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00221EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/17 12:00 a.m.19 views

AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7AI score0.00237EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/12/15 12:00 a.m.9 views

AzeoTech DAQFactory Memory Corruption Vulnerability

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a memory corruption vulnerability that exists when parsing a specially crafted .ctl file and can be exploited by an attacker t...

7.3CVSS7.6AI score0.00022EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:00 a.m.10 views

The vulnerability of the imx95-blk-ctl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the imx95-blk-ctl component in the Linux operating system’s kernel is related to the lack of synchronization. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6AI score0.00159EPSS
SaveExploits0References9Affected Software3
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.17 views

CVE-2025-66586

In AzeoTech DAQFactory release 20.7 Build 2555, an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.4AI score0.00221EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/12 9:16 p.m.12 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00237EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/11 9:15 p.m.14 views

CVE-2025-66586

In AzeoTech DAQFactory release 20.7 Build 2555, an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS0.00221EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/11 9:15 p.m.25 views

CVE-2025-66586

In AzeoTech DAQFactory release 20.7 Build 2555, an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS5.9AI score0.00221EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/11 8:58 p.m.29 views

CVE-2025-66584

...

0.00022EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/12/11 8:58 p.m.6 views

CVE-2025-66584

...

6.3AI score0.00022EPSS
SaveExploits0
attackerkb
attackerkb
added 2025/12/11 8:56 p.m.7 views

CVE-2025-66585

In AzeoTech DAQFactory release 20.7 Build 2555, a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00237EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2025/12/11 8:54 p.m.10 views

CVE-2025-66586

In AzeoTech DAQFactory release 20.7 Build 2555, an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS7.3AI score0.00221EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/11 8:53 p.m.24 views

CVE-2025-66587

...

0.00022EPSS
SaveExploits0
EUVD
EUVD
added 2025/12/11 8:53 p.m.10 views

EUVD-2025-202860

In AzeoTech DAQFactory release 20.7 Build 2555, the affected application is vulnerable to memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process...

7.3CVSS6.9AI score0.00022EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/11 8:53 p.m.18 views

CVE-2025-66587

CVE-2025-66587 (CVE entry rejected in some listings) has connected reports detailing a memory corruption vulnerability in AzeoTech DAQFactory v20.7 (Build 2555). The flaw arises when parsing specially crafted .ctl files, leading to possible arbitrary code execution or a crash. Multiple sources (R...

7.1AI score0.00022EPSS
SaveExploits0
ICS
ICS
added 2025/12/11 7:00 a.m.19 views

AzeoTech DAQFactory (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities requires an attacker to upload a malicious .ctl file. This could lead to information disclosure or arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

9.8CVSS7.6AI score0.00383EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.8 views

编号撤回

AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, Inc. and commonly used in industrial automation. AzeoTech DAQFactory suffers from a memory corruption vulnerability that exists when parsing a specially crafted .ctl file and can be exploited by an attacker t...

7.3AI score0.00022EPSS
SaveExploits0References1
Rows per page
Query Builder