Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-66590

In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:995e6c9fcd0b81331b3488ef3264dda79ed8dbc7f6340579e8b17b9645702398
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

cvss · 2 assertions

{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.4,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"…

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/metrics/0/cvssV4_0

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/metrics/1/cvssV3_1

Affected products and versions

1 source assertion
{"defaultStatus":"unaffected","product":"DAQFactory","vendor":"AzeoTech","versions":[{"lessThanOrEqual":"Release 20.7 (Build 2555)","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"Release 21.1"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/affected/0

Provider-owned CVSS observations

2 source assertions
{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.4,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"…
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/metrics/0/cvssV4_0
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions
{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-345-03.json"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/references/1
{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:75d648e797875843cc30134990f5a3eef26dea8df1cf72241dc2773b5446d8ea · sha256:209d7b62d7ca50d7… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer