Back to Database
Status published
High
CVE-2025-66585
Use After Free vulnerability in AzeoTech DAQFactory
Vulnerability Description
In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66585
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Andrea Micalizzi of Trend Zero Day Initiative
- Michael Heinzl
References
More from AzeoTech
View All →CVE-2025-66590
Out-of-bounds Write vulnerability in AzeoTech DAQFactory
High
8.4
CVE-2025-66589
Out-of-bounds Read vulnerability in AzeoTech DAQFactory
High
8.4
CVE-2025-66588
Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory
High
8.4
CVE-2025-66586
Type Confusion vulnerability in AzeoTech DAQFactory
High
7.3
CVE-2021-42701
AzeoTech DAQFactory
Medium
5
Affected Vendor
AzeoTech
View all reports →Affected Software
DAQFactory
Vulnerable Versions:
0, Release 21.1
Timeline
Official Publish:
December 11th, 2025
Last Modified:
June 4th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H