PT-2025-50738 · Azeotech · Daqfactory

Published 2025-12-11 · Updated 2025-12-12 · CVE-2025-66587

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AzeoTech DAQFactory version 20.7 (Build 2555)

Description The application is susceptible to memory corruption when processing specifically designed .ctl files. Successful exploitation of this issue could enable an attacker to execute code with the privileges of the current process.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-66587

Affected Products

Daqfactory

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66587 · Security Note
• https://t.me/CVEtracker/39524 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-345-03 · Note
• https://twitter.com/VulmonFeeds/status/1999345058957439232 · Twitter Post