CVE-2021-42699— AzeoTech DAQFactory
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-42699
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AzeoTech DAQFactory
Source: CVE Program / CVE List V5
Vulnerability Description
The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文传输
Source: CVE Program / CVE List V5
Vulnerability Title
AzeoTech DAQFactory 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AzeoTech DAQFactory是提供您轻松创建 HMI/SCADA 应用程序所需的工具。 AzeoTech DAQFactory 中存在信息泄露漏洞，该漏洞源于产品未对Cookie数据进行加密。攻击者可通过抓包获取从Cookie中获取敏感数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AzeoTech | DAQFactory | All versions ~ New version | - |
II. Public POCs for CVE-2021-42699
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-42699
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-42699 (1)
Same Patch Batch · AzeoTech · 2021-11-05 · 4 CVEs total
| CVE-2021-42543 | 7.8 HIGH | AzeoTech DAQFactory |
| CVE-2021-42698 | 7.8 HIGH | AzeoTech DAQFactory |
| CVE-2021-42701 | 5.0 MEDIUM | AzeoTech DAQFactory |
IV. Related Vulnerabilities
Same product: DAQFactory
- CVE-2026-12921
Use after free in AzeoTech DAQFactory - CVE-2026-12390
Access of resource using incompatible type ('type confusion' - CVE-2025-66585
Use After Free vulnerability in AzeoTech DAQFactory - CVE-2025-66586
Type Confusion vulnerability in AzeoTech DAQFactory - CVE-2025-66588
Access of Uninitialized Pointer vulnerability in AzeoTech DA
Same vendor: AzeoTech
- CVE-2026-12921
Use after free in AzeoTech DAQFactory - CVE-2026-12390
Access of resource using incompatible type ('type confusion' - CVE-2025-66585
Use After Free vulnerability in AzeoTech DAQFactory - CVE-2025-66586
Type Confusion vulnerability in AzeoTech DAQFactory - CVE-2025-66588
Access of Uninitialized Pointer vulnerability in AzeoTech DA
Same weakness: CWE-319
- CVE-2026-20294
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnera - CVE-2026-18536
Data::Entropy versions before 0.010 for Perl read remote ent - CVE-2026-3182
Sensitive Data Exposure - CVE-2026-48022
@hapi/wreck: Sensitive credential headers leak across cross- - CVE-2026-34346
Windows Ancillary Function Driver for WinSock Information Di
V. Comments for CVE-2021-42699
No comments yet