Vulnerability · Published Dec 11, 2025 · Assigned by icscert
CVE-2025-66589Out-of-bounds Read vulnerability in AzeoTech DAQFactory
High 8.4
In plain English
A high-severity out-of-bounds read in DAQFactory from AzeoTech. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 4.0)8.4High
Exploit odds (30 days)0.4%top 70.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AzeoTech | DAQFactory | 0 – through Release 20.7 (Build 2555) |
Weakness: CWE-125 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 government-resource