Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Eclipse Foundation NetX Duo 6.4.4 Clear all filters
TI-2025-34772 CVE-2025-55082

Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find()

Priority LOW 36

In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read in _nx_secure_tls_process_clienthello() because of a missing validation of PSK length provided in the…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00251 Published 2025-10-15 Fixed in 6.4.4 CWE-125
TI-2025-34771 CVE-2025-55081

Potential out of bound read in _nx_secure_tls_process_clienthello()

Priority LOW 37

In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and com…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00369 Published 2025-10-15 Fixed in 6.4.4 CWE-126