CNNVD-202512-2075 Information

CNNVD ID

CNNVD-202512-2075

CVE-2025-66585

  • CNNVD Published: 2025-12-11

Description (Chinese)

AzeoTech DAQFactory是AzeoTech公司的一款轻松创建 HMI/SCADA 应用程序所需的工具。 AzeoTech DAQFactory 20.7版本存在资源管理错误漏洞,该漏洞源于解析特制.ctl文件时存在释放后重用,可能导致内存损坏和执行任意代码。

Description (English)

AzeoTech DAQFactory is a tool needed by AzeoTech to easily create HMI/SCADA applications. Version 20.7 of Azeo Tech DAQFactory contains a resource management error loophole, which stems from the release and reuse of the special.ctl file, which may lead to memory damage and the enforcement of any code.

Hazard Level

Medium

Vulnerability Type

资源管理错误

Affected Vendor

AzeoTech

Published

2025-12-11

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03

Share on: