CVE-2025-66590 | THREATINT

Description

In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.

PUBLISHED Reserved 2025-12-04 | Published 2025-12-11 | Updated 2025-12-30 | Assigner icscert

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-787 Out-of-bounds Write

Product status

Default status

unaffected

Any version

affected

Credits

Michael Heinzl finder

Rocco Calvi (@TecR0c) with TecSecurity of Trend Zero Day Initiative finder

Andrea Micalizzi (@rgod777) of Trend Zero Day Initiative finder

References

www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 government-resource

cve.org (CVE-2025-66590)

nvd.nist.gov (CVE-2025-66590)

Download JSON