CVE-2025-66586

Summary: CVE-2025-66586 affects AzeoTech DAQFactory 20.7 (Build 2555). The CTL file parsing code has a type-confusion vulnerability that can lead to memory corruption and remote code execution in the context of the current process. The ZDI advisories (ZDI-25-1132, -1131, -1133, -1134) describe th...

CVE-2025-66587

...

CVE-2025-66587

...

CVE-2025-66587

CVE-2025-66587 (CVE entry rejected in some listings) has connected reports detailing a memory corruption vulnerability in AzeoTech DAQFactory v20.7 (Build 2555). The flaw arises when parsing specially crafted .ctl files, leading to possible arbitrary code execution or a crash. Multiple sources (R...

CVE-2025-66588

In AzeoTech DAQFactory release 20.7 Build 2555, an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution...

EUVD-2025-202861

In AzeoTech DAQFactory release 20.7 Build 2555, an Access of Uninitialized Pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution...

CVE-2025-66588 Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution...

CVE-2025-66588 Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution...

CVE-2025-66588

In AzeoTech DAQFactory 20.7 (Build 2555), CVE-2025-66588 is an Access of Uninitialized Pointer vulnerability (also described as memory corruption risks such as buffer overflows) that can lead to arbitrary code execution. Multiple sources (NVD entry and CNVD/Red Hat/ICS/CVE records) describe a mem...

CVE-2025-66589 Out-of-bounds Read vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash...

EUVD-2025-202862

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash...

CVE-2025-66589 Out-of-bounds Read vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash...

CVE-2025-66589

CVE-2025-66589 affects AzeoTech DAQFactory 20.7 (Build 2555). The vulnerability is an out-of-bounds read in the DAQFactory runtime that can cause reading past the end of an allocated buffer, potentially leading to information disclosure or a crash. Public sources in the provided documents consist...

CVE-2025-66590 Out-of-bounds Write vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash...

CVE-2025-66590 Out-of-bounds Write vulnerability in AzeoTech DAQFactory

In AzeoTech DAQFactory release 20.7 Build 2555, an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash...

CVE-2025-66590

In DAQFactory release 20.7 (Build 2555) from AzeoTech, CVE-2025-66590 is described as an out-of-bounds write vulnerability that can cause writes past a memory buffer, potentially enabling arbitrary code execution or a system crash. Connected sources (NVD/Red Hat/ICS-CISA/etc.) corroborate the sam...

CVE-2025-66590

In AzeoTech DAQFactory release 20.7 Build 2555, an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash...

EUVD-2025-202864

In AzeoTech DAQFactory release 20.7 Build 2555, an Out-of-bounds Write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash...

CISA Releases 12 Industrial Control Systems Advisories

CISA released 12 Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-345-01 Johnson Controls iSTAR ICSA-25-345-02 Johnson Controls iSTAR Ultra ICSA-25-345-03 AzeoTech DAQFactor...

AzeoTech DAQFactory (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities requires an attacker to upload a malicious .ctl file. This could lead to information disclosure or arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...