BaseFortify

Publication date: 2025-12-11

Last updated on: 2026-06-04

Assigner: ICS-CERT

Description

In AzeoTech DAQFactory release 20.7 (Build 2555), an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-11

Last Modified

2026-06-04

Generated

2026-07-06

AI Q&A

2025-12-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-66586

Affected Vendors & Products

Vendor	Product	Version / Range
azeotech	daqfactory	20.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

This vulnerability exists in AzeoTech DAQFactory release 20.7 (Build 2555) and involves an Access of Resource Using Incompatible Type flaw. It can be exploited by parsing specially crafted .ctl files, which leads to memory corruption. This memory corruption could allow an attacker to execute arbitrary code within the context of the current process.

Impact Analysis

The vulnerability can impact you by allowing an attacker to execute arbitrary code on your system with the privileges of the DAQFactory process. This could lead to unauthorized actions, data compromise, system instability, or further exploitation depending on the permissions of the affected process.

Hi! I’m here to help you understand CVE-2025-66586. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70