AzeoTech — Vulnerabilities & Security Advisories 9

AzeoTech develops data acquisition and control software for industrial automation systems. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and authentication flaws. The company has addressed multiple CVEs, including critical RCE flaws in their DAQFactory product that could allow unauthorized system compromise. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in industrial control software highlights ongoing challenges in securing critical infrastructure against increasingly sophisticated threats targeting operational technology environments.