The vulnerability identified as CVE-2025-66588 affects AzeoTech DAQFactory release 20.7 (Build 2555). It is classified as CWE-824, which involves access of an uninitialized pointer. Exploitation requires local access and user interaction, and can result in arbitrary code execution with high impact on system confidentiality, integrity, and availability. The CVSS 4.0 vector indicates low attack complexity and no privileges required, but user interaction is necessary. No patch or official fix has been documented, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the DAQFactory application environment. The impact is rated high due to the ability to affect confidentiality, integrity, and availability. However, exploitation requires local access and user interaction, which limits remote attack vectors. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor AzeoTech communications for updates. Until a fix is available, limit local access to trusted users and avoid actions that could trigger the vulnerability. No vendor advisory indicating 'no action required' or 'already mitigated' is available.