by Kastro
Paper/Archive/CVE-2025-66589

CVE-2025-66589

AzeoTech DAQFactory — Out-of-bounds Read vulnerability in AzeoTech DAQFactory

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
33
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 29.1.291 × 205.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.

Affected

ProductAffectedFixed inSource
DAQFactory≤ Release 20.7 (Build 2555)–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
icscert (CNA)8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-25-345-03