What’s Vulnerable › Vulnerabilities

CVE-2025-66590: Out-of-bounds Write vulnerability in AzeoTech DAQFactory

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-11 · updated 2026-10-07
• Weakness: CWE-787

Description

In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.

Affected products

• AzeoTech DAQFactory: before 21.1 — fixed in 21.1

How to fix

Upgrade to a fixed version: AzeoTech DAQFactory 21.1. Check the vendor advisory for mitigations.

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-345-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03

Get alerted when CVE-2025-66590 or the next vulnerability affects your stack