PT-2025-50730 · Azeotech · Daqfactory

Michael Heinzl · Published 2025-12-11 · Updated 2025-12-19 · CVE-2025-66590

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 (Build 2555)

Description An Out-of-bounds Write issue exists in AzeoTech DAQFactory release 20.7 (Build 2555). An attacker can exploit this to cause the program to write data beyond the boundaries of an allocated memory buffer. Successful exploitation may lead to arbitrary code execution or a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-66590

ZDI-25-1129

ZDI-25-1130

ZDI-25-1162

Affected Products

Daqfactory

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-66590 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1129 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1162 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66590 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-25-1130 · Security Note
• https://twitter.com/VulmonFeeds/status/1999339939108897073 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-345-03 · Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-345-03.json · Note
• https://t.me/CVEtracker/39521 · Telegram Post