AzeoTech DAQFactory Access of Uninitialized Pointer Vulnerability Leading to Arbitrary Code Execution

A vulnerability allowing access of uninitialized pointers has been identified in AzeoTech DAQFactory version 20.7 (Build 2555) and prior. This vulnerability can be exploited by an attacker, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability can result in arbitrary code execution on the affected system.

Remediation

AzeoTech has released DAQFactory version 21.1 to address this vulnerability. Users are also advised to avoid using documents from untrusted sources, store .ctl files in a secure location, operate in 'Safe Mode' when handling unknown documents, and apply a document editing password to their files.