CVE-2025-66588 | THREATINT

Description

In AzeoTech DAQFactory release 20.7 (Build 2555), an Access of Uninitialized Pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.

PUBLISHED Reserved 2025-12-04 | Published 2025-12-11 | Updated 2025-12-15 | Assigner icscert

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-824 Access of Uninitialized Pointer

Product status

Default status

unaffected

Any version

affected

Credits

Michael Heinzl finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 government-resource

cve.org (CVE-2025-66588)

nvd.nist.gov (CVE-2025-66588)

Download JSON