CVE-2021-42699 - CVE House
Back to Database
Status published Medium CVE-2021-42699

AzeoTech DAQFactory

Vulnerability Description

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42699

Credits & Attribution

No credits recorded in the NVD database.

References

More from AzeoTech

View All →
CVE-2025-66590
Out-of-bounds Write vulnerability in AzeoTech DAQFactory
High 8.4
CVE-2025-66589
Out-of-bounds Read vulnerability in AzeoTech DAQFactory
High 8.4
CVE-2025-66588
Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory
High 8.4
CVE-2025-66586
Type Confusion vulnerability in AzeoTech DAQFactory
High 7.3
CVE-2025-66585
Use After Free vulnerability in AzeoTech DAQFactory
High 7.3

Affected Vendor

Affected Software

DAQFactory
Vulnerable Versions:
All versions

Timeline

Official Publish: November 5th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-319

MITRE ATT&CK TTPs

T1040 Network Sniffing
Collection
T1557 Adversary-in-the-Middle
Credential Access
T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1071 Application Layer Protocol
Command and Control