Quick answers
- Is CVE-2025-66585 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2025-66585 being exploited in the wild.
- How severe is CVE-2025-66585?
- High severity, with a CVSS score of 7.8, published 11 December 2025.
- Which products and versions are affected?
- Azeotech Daqfactory <= 20.7 Build 2555.
- Is there a fix for CVE-2025-66585?
- A patch was published on 2025-12-30: Update A of the advisory confirms Release 21.1 as the fix. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2025-66585 attacked?
- It is attacked with local access, in a network appliance.
- Am I affected by CVE-2025-66585?
- Check whether you run Azeotech Daqfactory at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A Use After Free (CWE-416) vulnerability exists in AzeoTech DAQFactory version 20.7 (Build 2555) and earlier. The flaw is triggered during the parsing of specially crafted .ctl files, where the application attempts to access memory that has already been freed. This results in memory corruption that an attacker can leverage to execute arbitrary code in the context of the current process. Exploitation requires local access and user interaction, specifically convincing a user to open a malicious document. AzeoTech has addressed this vulnerability in Release 21.1.
Affected products
- AzeoTech DAQFactory <= 20.7 Build 2555
Timeline
- 2025-12-11: disclosed
- 2025-12-11: advisory
- 2025-12-30: patched: Update A of the advisory confirms Release 21.1 as the fix.