AzeoTech DAQFactory (Update A)

Risk Summary

Successful exploitation of these vulnerabilities requires an attacker to upload a malicious .ctl file. This could lead to information disclosure or arbitrary code execution.

CVEs (5)

Remediations

• AzeoTech has released the following update that addresses these issues:
• DAQFactory: Release 21.1
• AzeoTech also recommends users take the following actions to reduce the risk:
• Users are discouraged from using documents from unknown/untrusted sources.
• Users are encouraged to store .ctl files in a folder only writeable by admin-level users.
• Users are encouraged to operate in "Safe Mode" when loading documents that have been out of their control.
• Users are encouraged to apply a document editing password to their documents.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing