Skip to content
OpenAdvisories
High ICSA-21-308-02 4 CVEs

AzeoTech DAQFactory

Published Nov 4, 2021 · Updated Nov 4, 2021

Vendor: AzeoTech Product: DAQFactory

Summary

Successful exploitation of these vulnerabilities could allow code execution, memory corruption, or unauthorized access to user information.

Vulnerabilities 4

  • High 7.8
    CVE-2021-42543

    AzeoTech DAQFactory

    The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown.

    AzeoTech DAQFactory
  • High 7.8
    CVE-2021-42698

    AzeoTech DAQFactory

    Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory.

    AzeoTech DAQFactory
  • Medium 5.7
    CVE-2021-42699

    AzeoTech DAQFactory

    The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.

    AzeoTech DAQFactory
  • Medium 5.0
    CVE-2021-42701

    AzeoTech DAQFactory

    An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account.

    AzeoTech DAQFactory

Revision history

  1. #1

    ICSA-21-308-02 AzeoTech DAQFactory

References