Skip to main content

Daqfactory CVE-2021-42543

HIGH
Use of Inherently Dangerous Function (CWE-242)
2021-11-05 ics-cert@hq.dhs.gov
RCE Daqfactory
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 05, 2021 - 16:15 nvd
HIGH 7.8

DescriptionNVD

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown.

AnalysisAI

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-242. The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown. Affected products include: Azeotech Daqfactory.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Daqfactory

View all
CVE-2026-12390 HIGH
8.4 Jun 18

Code execution in AzeoTech DAQFactory versions 21.1 and prior is achievable when a user opens a maliciously crafted .ctl
CVE-2026-12921 HIGH
8.4 Jun 25

Arbitrary code execution in AzeoTech DAQFactory (versions 21.1 and prior) arises from a use-after-free flaw triggered wh
CVE-2025-66590 HIGH
8.4 Dec 11

Out-of-bounds write in AzeoTech DAQFactory release 20.7 (Build 2555) enables arbitrary code execution or denial of servi
CVE-2025-66588 HIGH
8.4 Dec 11

Arbitrary code execution in AzeoTech DAQFactory release 20.7 (Build 2555) is possible when a local user opens or interac
CVE-2021-42698 HIGH
7.8 Nov 05

Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized ag
CVE-2025-66586 HIGH
7.3 Dec 11

Type confusion in AzeoTech DAQFactory 20.7 (Build 2555) enables arbitrary code execution when a user opens a maliciously
CVE-2025-66585 HIGH
7.3 Dec 11

Local code execution in AzeoTech DAQFactory release 20.7 (Build 2555) is possible when a user opens a maliciously crafte
CVE-2017-12699 HIGH
7.1 Sep 09

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Rated high severity
CVE-2021-42701 MEDIUM
6.3 Nov 05

An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and tr
CVE-2021-42699 MEDIUM
5.9 Nov 05

The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. Rated medium severity
CVE-2017-5147 MEDIUM
5.3 Sep 09

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Rated medium sev

Same weakness CWE-242 – Use of Inherently Dangerous Function

View all
CVE-2022-36310 HIGH POC
8.8
CVE-2024-52324 CRITICAL
9.2
CVE-2025-49215 HIGH
8.8
CVE-2026-6477 HIGH
8.8
CVE-2017-0904 HIGH
8.1
CVE-2025-1331 HIGH
7.8
CVE-2025-1994 HIGH
7.8

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2021-42543 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy