CVE-2025-66589 | THREATINT

Description

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.

PUBLISHED Reserved 2025-12-04 | Published 2025-12-11 | Updated 2025-12-30 | Assigner icscert

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-125 Out-of-bounds Read

Product status

Default status

unaffected

Any version

affected

Credits

Michael Heinzl finder

Rocco Calvi (@TecR0c) with TecSecurity of Trend Zero Day Initiative finder

Andrea Micalizzi (@rgod777) of Trend Zero Day Initiative finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 government-resource

cve.org (CVE-2025-66589)

nvd.nist.gov (CVE-2025-66589)

Download JSON