PT-2025-50729 · Azeotech · Daqfactory

Michael Heinzl · Published 2025-12-11 · Updated 2026-02-03 · CVE-2025-66589

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 (Build 2555)

Description An Out-of-bounds Read issue exists in AzeoTech DAQFactory release 20.7 (Build 2555). This allows an attacker to read data beyond the boundaries of an allocated buffer. Successful exploitation could lead to information disclosure or a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-66589

ZDI-25-1156

ZDI-25-1157

ZDI-25-1158

ZDI-25-1159

ZDI-25-1160

ZDI-25-1161

ZDI-26-058

Affected Products

Daqfactory

References · 13

• https://zerodayinitiative.com/advisories/ZDI-25-1156 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1160 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1157 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-058 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66589 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-1161 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1159 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-66589 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-345-03 · Note
• https://twitter.com/VulmonFeeds/status/1999342499005894802 · Twitter Post
• https://t.me/CVEtracker/39522 · Telegram Post
• https://twitter.com/SystemTek_UK/status/2018726936533458992 · Twitter Post