The vulnerability identified as CVE-2025-66590 in AzeoTech DAQFactory 20.7 (Build 2555) involves an out-of-bounds write (CWE-787). This occurs when the program writes data past the end of an allocated memory buffer, which can corrupt memory and potentially allow an attacker to execute arbitrary code or cause a denial of service via a system crash. The CVSS 4.0 vector indicates local attack vector with low attack complexity, no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability with high severity. No patch or vendor advisory is currently available.

Successful exploitation of this vulnerability can lead to arbitrary code execution or cause the affected application to crash, impacting system availability and potentially compromising system integrity and confidentiality. The attack requires local access and user interaction, limiting remote exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is currently available, users should monitor AzeoTech communications for updates. Until a fix is released, avoid running untrusted code or files within DAQFactory and limit local user access where possible.