Azeotech: >> Daqfactory >> 5.85 Security Vulnerabilities
An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account.
CVSS Score
5.0
EPSS Score
0.006
Published
2021-11-05
An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones.
CVSS Score
7.1
EPSS Score
0.003
Published
2017-09-09
An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path.
CVSS Score
5.3
EPSS Score
0.003
Published
2017-09-09
Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.
CVSS Score
10.0
EPSS Score
0.709
Published
2011-09-16
Page 2