Back to Database
Status published
High
CVE-2025-66590
Out-of-bounds Write vulnerability in AzeoTech DAQFactory
Vulnerability Description
In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66590
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Michael Heinzl
- Rocco Calvi (@TecR0c) with TecSecurity of Trend Zero Day Initiative
- Andrea Micalizzi (@rgod777) of Trend Zero Day Initiative
References
More from AzeoTech
View All →CVE-2025-66589
Out-of-bounds Read vulnerability in AzeoTech DAQFactory
High
8.4
CVE-2025-66588
Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory
High
8.4
CVE-2025-66586
Type Confusion vulnerability in AzeoTech DAQFactory
High
7.3
CVE-2025-66585
Use After Free vulnerability in AzeoTech DAQFactory
High
7.3
CVE-2021-42701
AzeoTech DAQFactory
Medium
5
Affected Vendor
AzeoTech
View all reports →Affected Software
DAQFactory
Vulnerable Versions:
0, Release 21.1
Timeline
Official Publish:
December 11th, 2025
Last Modified:
June 4th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H