Vulnerabilities > CVE-2021-42698 - Deserialization of Untrusted Data vulnerability in Azeotech Daqfactory

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

azeotech

CWE-502

NVD

Published: 2021-11-05

Updated: 2021-11-09

Summary

Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory.

Vulnerable Configurations

Part	Description	Count
Application	Azeotech Azeotech Daqfactory - Azeotech Daqfactory 3.0 Azeotech Daqfactory 3.03 Azeotech Daqfactory 3.05 Azeotech Daqfactory 3.5 Azeotech Daqfactory 3.09 Azeotech Daqfactory 3.10 Azeotech Daqfactory 3.11 Azeotech Daqfactory 3.51 Azeotech Daqfactory 3.52 Azeotech Daqfactory 3.53 Azeotech Daqfactory 3.55 Azeotech Daqfactory 4.00 Azeotech Daqfactory 4.10 Azeotech Daqfactory 4.11 Azeotech Daqfactory 5.0 Azeotech Daqfactory 5.01 Azeotech Daqfactory 5.02 Azeotech Daqfactory 5.03 Azeotech Daqfactory 5.04 Azeotech Daqfactory 5.05 Azeotech Daqfactory 5.10 Azeotech Daqfactory 5.11 Azeotech Daqfactory 5.12 Azeotech Daqfactory 5.15 Azeotech Daqfactory 5.30 Azeotech Daqfactory 5.31 Azeotech Daqfactory 5.32 Azeotech Daqfactory 5.33 Azeotech Daqfactory 5.34 Azeotech Daqfactory 5.35 Azeotech Daqfactory 5.36 Azeotech Daqfactory 5.37 Azeotech Daqfactory 5.38 Azeotech Daqfactory 5.39 Azeotech Daqfactory 5.40 Azeotech Daqfactory 5.70 Azeotech Daqfactory 5.71 Azeotech Daqfactory 5.72 Azeotech Daqfactory 5.73 Azeotech Daqfactory 5.74 Azeotech Daqfactory 5.75 Azeotech Daqfactory 5.76 Azeotech Daqfactory 5.77 Azeotech Daqfactory 5.78 Azeotech Daqfactory 5.79 Azeotech Daqfactory 5.80 Azeotech Daqfactory 5.82 Azeotech Daqfactory 5.83- Azeotech Daqfactory 5.83A Azeotech Daqfactory 5.84 Azeotech Daqfactory 5.85 Azeotech Daqfactory 5.86 Azeotech Daqfactory 5.87- Azeotech Daqfactory 5.87B Azeotech Daqfactory 5.87C Azeotech Daqfactory 5.90 Azeotech Daqfactory 5.90.1 Azeotech Daqfactory 5.90.2 Azeotech Daqfactory 5.90.3 Azeotech Daqfactory 5.90.4 Azeotech Daqfactory 5.90.5 Azeotech Daqfactory 5.90.6 Azeotech Daqfactory 5.90.7 Azeotech Daqfactory 5.90.8 Azeotech Daqfactory 5.90.9 Azeotech Daqfactory 5.91 Azeotech Daqfactory 16.1 Azeotech Daqfactory 16.2 Azeotech Daqfactory 16.3 Azeotech Daqfactory 17.1 Azeotech Daqfactory 18.1	73

Common Weakness Enumeration (CWE)

CWE-502 - Deserialization of Untrusted Data

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02