Access of Uninitialized Pointer Vulnerability in AzeoTech DAQFactory
CVE-2025-66588

8.4HIGH

Key Information:

Vendor

Azeotech

Status
Daqfactory
Vendor
CVE Published:
11 December 2025

What is CVE-2025-66588?

In AzeoTech DAQFactory release 20.7 (Build 2555), a vulnerability exists due to access of an uninitialized pointer. This flaw can be exploited by attackers, potentially leading to arbitrary code execution, jeopardizing the integrity and security of the system. Organizations using this software should apply immediate precautions to protect their environments as attackers may exploit this vulnerability to run malicious code.

Affected Version(s)

DAQFactory 0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
government-resource

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Heinzl
JSON
.
CVE-2025-66588 : Access of Uninitialized Pointer Vulnerability in AzeoTech DAQFactory