Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Eclipse Foundation NetX Duo 6.4.4 Clear all filters
TI-2025-34775 CVE-2025-55085

Web http client: Unchecked Server-Side Malicious Packet Issue

Priority MEDIUM 47

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00613 Published 2025-10-17 Fixed in 6.4.4 CWE-125
TI-2025-34783 CVE-2025-55094

Potential out-of-bounds read in _nx_icmpv6_validate_options()

Priority LOW 37

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_icmpv6_validate_options() when handling a packet with ICMP6 options.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0041 Published 2025-10-17 Fixed in 6.4.4 CWE-125
TI-2025-34781 CVE-2025-55092

Potential out of bound read in _nx_ipv4_option_process()

Priority LOW 36

In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _nx_ipv4_option_process() when processing an IPv4 packet with th…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00331 Published 2025-10-17 Fixed in 6.4.4 CWE-125