CVE-2025-66590 AzeoTech CVE debrief

Who should care

Organizations operating AzeoTech DAQFactory in industrial control system environments, particularly those processing untrusted document files or with multi-user access to .ctl configuration files. Asset owners in manufacturing, process control, and building automation sectors using DAQFactory for data acquisition and supervisory control should prioritize patching.

Technical summary

The vulnerability exists in DAQFactory release 20.7 (Build 2555) where an out-of-bounds write condition can be triggered, causing writes beyond allocated buffer boundaries. This memory safety defect may result in arbitrary code execution within the context of the application or cause denial of service through system crash. The attack requires local access and user interaction, suggesting exploitation via malicious document files.

Defensive priority

HIGH

Recommended defensive actions

• Upgrade to DAQFactory Release 21.1 per vendor fix guidance.
• Avoid opening documents from unknown or untrusted sources.
• Store .ctl files in directories with admin-only write permissions.
• Enable Safe Mode when loading documents that have been outside organizational control.
• Apply document editing passwords to protect document integrity.
• Review CISA ICS recommended practices for additional defense-in-depth strategies.

Evidence notes

Vendor and product identification derived from CSAF product tree with high confidence. Remediation guidance extracted from CSAF remediations section. CVSS vector confirmed via source references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.