CVE-2021-42698

Published: Nov 5, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory.

Affected (2)

Products: Azeotech: Daqfactory

Azeotech

1 product

Daqfactory

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Azeotech Daqfactory	Up to 18.1
Azeotech Daqfactory	Version 18.1 build_2347

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.