AzeoTech DAQFactory ICSA-17-241-01 Multiple Local Security Vulnerability

Bugtraq ID:	100522
Class:	Input Validation Error
CVE:	CVE-2017-12699 CVE-2017-5147
Remote:	Yes
Local:	No
Published:	Aug 29 2017 12:00AM
Updated:	Aug 29 2017 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Azeotech Daqfactory 5.91 Azeotech Daqfactory 5.90 Azeotech Daqfactory 5.86 Azeotech Daqfactory 5.85 Azeotech Daqfactory 5.84 Azeotech Daqfactory 5.83 Azeotech Daqfactory 16.3 Azeotech Daqfactory 16.2 Azeotech Daqfactory 16.1
Not Vulnerable:	Azeotech Daqfactory 17.1

AzeoTech DAQFactory ICSA-17-241-01 Multiple Local Security Vulnerability

AzeoTech DAQFactory is prone to multiple security vulnerabilities.

Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected applications or bypass certain security restrictions and perform unauthorized actions.

Versions prior to DAQFactory 17.1 are vulnerable.

AzeoTech DAQFactory ICSA-17-241-01 Multiple Local Security Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

AzeoTech DAQFactory ICSA-17-241-01 Multiple Local Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.