AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals, which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal.
Weakness
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Daqfactory | Azeotech | * | 5.84 (including) |
| Daqfactory | Azeotech | 3.0 (including) | 3.0 (including) |
| Daqfactory | Azeotech | 3.03 (including) | 3.03 (including) |
| Daqfactory | Azeotech | 3.5 (including) | 3.5 (including) |
| Daqfactory | Azeotech | 3.05 (including) | 3.05 (including) |
| Daqfactory | Azeotech | 3.09 (including) | 3.09 (including) |
| Daqfactory | Azeotech | 3.10 (including) | 3.10 (including) |
| Daqfactory | Azeotech | 3.11 (including) | 3.11 (including) |
| Daqfactory | Azeotech | 3.51 (including) | 3.51 (including) |
| Daqfactory | Azeotech | 3.52 (including) | 3.52 (including) |
| Daqfactory | Azeotech | 3.53 (including) | 3.53 (including) |
| Daqfactory | Azeotech | 3.55 (including) | 3.55 (including) |
| Daqfactory | Azeotech | 4.00 (including) | 4.00 (including) |
| Daqfactory | Azeotech | 4.10 (including) | 4.10 (including) |
| Daqfactory | Azeotech | 4.11 (including) | 4.11 (including) |
| Daqfactory | Azeotech | 5.0 (including) | 5.0 (including) |
| Daqfactory | Azeotech | 5.01 (including) | 5.01 (including) |
| Daqfactory | Azeotech | 5.02 (including) | 5.02 (including) |
| Daqfactory | Azeotech | 5.03 (including) | 5.03 (including) |
| Daqfactory | Azeotech | 5.04 (including) | 5.04 (including) |
| Daqfactory | Azeotech | 5.05 (including) | 5.05 (including) |
| Daqfactory | Azeotech | 5.10 (including) | 5.10 (including) |
| Daqfactory | Azeotech | 5.11 (including) | 5.11 (including) |
| Daqfactory | Azeotech | 5.12 (including) | 5.12 (including) |
| Daqfactory | Azeotech | 5.15 (including) | 5.15 (including) |
| Daqfactory | Azeotech | 5.30 (including) | 5.30 (including) |
| Daqfactory | Azeotech | 5.31 (including) | 5.31 (including) |
| Daqfactory | Azeotech | 5.32 (including) | 5.32 (including) |
| Daqfactory | Azeotech | 5.33 (including) | 5.33 (including) |
| Daqfactory | Azeotech | 5.34 (including) | 5.34 (including) |
| Daqfactory | Azeotech | 5.35 (including) | 5.35 (including) |
| Daqfactory | Azeotech | 5.36 (including) | 5.36 (including) |
| Daqfactory | Azeotech | 5.37 (including) | 5.37 (including) |
| Daqfactory | Azeotech | 5.38 (including) | 5.38 (including) |
| Daqfactory | Azeotech | 5.39 (including) | 5.39 (including) |
| Daqfactory | Azeotech | 5.40 (including) | 5.40 (including) |
| Daqfactory | Azeotech | 5.70 (including) | 5.70 (including) |
| Daqfactory | Azeotech | 5.71 (including) | 5.71 (including) |
| Daqfactory | Azeotech | 5.72 (including) | 5.72 (including) |
| Daqfactory | Azeotech | 5.73 (including) | 5.73 (including) |
| Daqfactory | Azeotech | 5.74 (including) | 5.74 (including) |
| Daqfactory | Azeotech | 5.75 (including) | 5.75 (including) |
| Daqfactory | Azeotech | 5.76 (including) | 5.76 (including) |
| Daqfactory | Azeotech | 5.77 (including) | 5.77 (including) |
| Daqfactory | Azeotech | 5.78 (including) | 5.78 (including) |
| Daqfactory | Azeotech | 5.79 (including) | 5.79 (including) |
| Daqfactory | Azeotech | 5.80 (including) | 5.80 (including) |
| Daqfactory | Azeotech | 5.82 (including) | 5.82 (including) |
| Daqfactory | Azeotech | 5.83 (including) | 5.83 (including) |
| Daqfactory | Azeotech | 5.83-a (including) | 5.83-a (including) |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/114.html
- https://cwe.mitre.org/data/definitions/115.html
- https://cwe.mitre.org/data/definitions/151.html
- https://cwe.mitre.org/data/definitions/194.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/57.html
- https://cwe.mitre.org/data/definitions/593.html
- https://cwe.mitre.org/data/definitions/633.html
- https://cwe.mitre.org/data/definitions/650.html
- https://cwe.mitre.org/data/definitions/94.html