CVE-2021-42698
HIGHAzeotech Daqfactory < 18.1 - Insecure Deserialization
Title source: ruleDescription
Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory.
Scores
CVSS v3
7.8
EPSS
0.0013
EPSS Percentile
31.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (2)
azeotech/daqfactory
< 18.1
azeotech/daqfactory
Timeline
Published
Nov 05, 2021
Tracked Since
Feb 18, 2026