azeotech 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
公開された問題は バッファオーバーフロー and vendor risk memory corruption に関連することが多く、vendor surface software deployment and vendor surface production workloads の文脈で アプリケーションクラッシュ and vendor impact memory corruption などの暴露リスクを伴う場合があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-66590 | In AzeoTech DAQFactory release 20.7 (Build 2555), an out-of-bounds write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash. | [email protected] | 8.4 | 0.09% | 2025-12-11 | 2026-06-04 |
| CVE-2025-66589 | In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash. | [email protected] | 8.4 | 0.06% | 2025-12-11 | 2026-01-02 |
| CVE-2025-66588 | In AzeoTech DAQFactory release 20.7 (Build 2555), an access of uninitialized pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution. | [email protected] | 8.4 | 0.09% | 2025-12-11 | 2026-06-04 |
| CVE-2025-66586 | In AzeoTech DAQFactory release 20.7 (Build 2555), an access of resource using incompatible type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process. | [email protected] | 7.3 | 0.02% | 2025-12-11 | 2026-06-04 |
| CVE-2025-66585 | In AzeoTech DAQFactory release 20.7 (Build 2555), a use after free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process. | [email protected] | 7.3 | 0.03% | 2025-12-11 | 2026-06-04 |
| CVE-2021-42701 | An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account. | [email protected] | 5.0 | 0.05% | 2021-11-05 | 2024-11-21 |
| CVE-2021-42699 | The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account. | [email protected] | 5.7 | 0.13% | 2021-11-05 | 2024-11-21 |
| CVE-2021-42698 | Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory. | [email protected] | 7.8 | 0.12% | 2021-11-05 | 2024-11-21 |
| CVE-2021-42543 | The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown. | [email protected] | 7.8 | 0.17% | 2021-11-05 | 2024-11-21 |
| CVE-2017-5147 | An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path. | [email protected] | 5.3 | 0.10% | 2017-09-09 | 2026-05-13 |
| CVE-2017-12699 | An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones. | [email protected] | 7.1 | 0.07% | 2017-09-09 | 2026-05-13 |
| CVE-2011-3492 | Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034. | [email protected] | 10.0 | 78.30% | 2011-09-16 | 2026-04-29 |
| CVE-2011-2956 | AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal. | [email protected] | 7.8 | 5.77% | 2011-07-28 | 2026-04-29 |
| CVE-2009-4480 | Buffer overflow in the web service in AzeoTech DAQFactory 5.77 might allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.16 through 8.11. NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. | [email protected] | 9.3 | 4.08% | 2009-12-30 | 2026-04-23 |