CVE-2025-66586
BaseFortify
Publication date: 2025-12-11
Last updated on: 2025-12-11
Assigner: ICS-CERT
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| azeotech | daqfactory | 20.7 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-843 | The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in AzeoTech DAQFactory release 20.7 (Build 2555) and involves an Access of Resource Using Incompatible Type flaw. It can be exploited by parsing specially crafted .ctl files, which leads to memory corruption. This memory corruption could allow an attacker to execute arbitrary code within the context of the current process.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing an attacker to execute arbitrary code on your system with the privileges of the DAQFactory process. This could lead to unauthorized actions, data compromise, system instability, or further exploitation depending on the permissions of the affected process.