CVE-2017-12699 Privilege escalation in AzeoTech DAQFactory
Local attackers can replace application files due to incorrect default permissions, leading to privilege escalation and potential code execution in DAQFactory.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12699?
CVE-2017-12699 is a high-severity vulnerability in AzeoTech DAQFactory, published on 9 Sep 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones.
Weakness: CWE-276
Which versions are affected by CVE-2017-12699?
It affects 1 product.
Products include Azeotech Daqfactory.
How do I fix CVE-2017-12699?
No fix has been published for CVE-2017-12699 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-12699 being exploited?
There is no known exploitation of CVE-2017-12699 in the wild and no public exploit code.
Other vulnerabilities in AzeoTech DAQFactory
- CVE-2011-3492 Memory corruption in n/a
- CVE-2009-4480 Memory corruption in n/a
- CVE-2026-12921 Use after free in AzeoTech DAQFactory
- CVE-2026-12390 Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory
- CVE-2025-66588 Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory
Sources
Also known as GHSA-h5fh-wgq8-2vr7.