CVE-2025-66588

In AzeoTech DAQFactory release 20.7 (Build 2555), an Access of Uninitialized Pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.

Scoring

Severity

HIGH

CVSS base score

8.4

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS probability

0.30%

CWE

CWE-824

Published

2025-12-11

Last modified

2026-06-04

Affected products

• AzeoTech DAQFactory
• AzeoTech DAQFactory

Weakness type

• CWE-824

Related vulnerabilities

• CVE-2026-88054 — Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load
• CVE-2026-67281 — Unauthenticated file read in Mikrotik RouterOS
• CVE-2026-54920 — OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize
• CVE-2026-47908 — Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824)
• CVE-2026-47320 — Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source...
• CVE-2026-42959 — Crash during DNSSEC validation of malicious content
• CVE-2026-39458 — BIG-IP DNS Cache vulnerability
• CVE-2026-44411 — A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The...

Markdown version · Browse all CVEs