ID
VAR-202512-0021
CVE
CVE-2025-66584
TITLE
AzeoTech DAQFactory Stack Buffer Overflow Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2025-30856
DESCRIPTION
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. AzeoTech DAQFactory is a data acquisition and monitoring software developed by AzeoTech, a US-based company, commonly used in industrial automation. AzeoTech DAQFactory contains a stack buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow that occurs when parsing specially crafted .ctl files, allowing attackers to execute arbitrary code
Trust: 1.44
sources:
NVD: CVE-2025-66584 //
CNVD: CNVD-2025-30856
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2025-30856
AFFECTED PRODUCTS
| vendor: | azeotech | model: | daqfactory release (build | scope: | eq | version: | 20.72555) | Trust: 0.6 |
sources:
CNVD: CNVD-2025-30856
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2025-30856
EXTERNAL IDS
| db: | NVD | id: | CVE-2025-66584 | Trust: 1.6 |
| db: | ICS CERT | id: | ICSA-25-345-03 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2025-30856 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-30856 //
NVD: CVE-2025-66584
REFERENCES
| url: | https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03 | Trust: 0.6 |
sources:
CNVD: CNVD-2025-30856
SOURCES
| db: | CNVD | id: | CNVD-2025-30856 |
| db: | NVD | id: | CVE-2025-66584 |
LAST UPDATE DATE
2026-01-14T23:36:27.211000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-30856 | date: | 2025-12-17T00:00:00 |
| db: | NVD | id: | CVE-2025-66584 | date: | 2025-12-30T20:16:00.837 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-30856 | date: | 2025-12-17T00:00:00 |
| db: | NVD | id: | CVE-2025-66584 | date: | 2025-12-11T21:15:57.263 |