TN
Product
Threadx Netx Duo
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 7Low 0
Watch
Add Threadx Netx Duo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55086 | 9.8 | Oct 20 | In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the… Affected: before 6.4.4.202503 |
| CVE-2024-2452 | 9.8 | Mar 26 | Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc() Affected: before 6.4.0 |
| CVE-2025-55081 | 9.1 | Oct 15 | Potential out of bound read in _nx_secure_tls_process_clienthello() Affected: before 6.4.4.202503 |
| CVE-2026-11576 | 7.5 | Jun 19 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path… Affected: 6.4.2 through 6.5.0.202601 |
| CVE-2025-55102 | 7.5 | Jan 27 | A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo Affected: before 6.4.5.202504 |
| CVE-2025-55085 | 7.5 | Oct 17 | Web http client: Unchecked Server-Side Malicious Packet Issue Affected: before 6.4.4.202503 |
| CVE-2025-55087 | 7.5 | Oct 17 | In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters Affected: before 6.4.4.202503 |
| CVE-2025-55094 | 7.5 | Oct 17 | Potential out-of-bounds read in _nx_icmpv6_validate_options() Affected: before 6.4.4.202503 |
| CVE-2025-2259 | 7.5 | Apr 6 | Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow Affected: before 6.4.3 |
| CVE-2025-2260 | 7.5 | Apr 6 | Eclipse ThreadX NetX Duo HTTP component server denial of service Affected: before 6.4.3 |
| CVE-2025-2258 | 7.5 | Apr 6 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.3 |
| CVE-2025-0727 | 7.5 | Feb 21 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.2 |
| CVE-2025-0728 | 7.5 | Feb 21 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.2 |
| CVE-2025-0726 | 7.5 | Feb 21 | Eclipse ThreadX NetX Duo HTTP server denial of service Affected: before 6.4.2 |
| CVE-2025-55091 | 6.5 | Oct 16 | Potential out of bound read in _nx_ip_packet_receive() Affected: before 6.4.4.202503 |
| CVE-2025-55090 | 6.5 | Oct 16 | Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo Affected: before 6.4.4.202503 |
| CVE-2025-55093 | 5.3 | Oct 17 | Out of bound read and write in _nx_ipv4_packet_receive() when handling unicast DHCP messages Affected: before 6.4.4.202503 |
| CVE-2025-55092 | 5.3 | Oct 17 | Potential out of bound read in _nx_ipv4_option_process() Affected: before 6.4.4.202503 |
| CVE-2025-55084 | 5.3 | Oct 16 | Out of bound read in _nx_secure_tls_proc_clienthello_supported_versions_extension() Affected: before 6.4.4.202503 |
| CVE-2025-55083 | 5.3 | Oct 15 | Broken bounds check in Broken bounds check in _nx_secure_tls_process_clienthello_psk_extension() Affected: before 6.4.4.202503 |
| CVE-2025-55082 | 5.3 | Oct 15 | Potential out of bound read and info leak in_nx_secure_tls_psk_identity_find() Affected: through 6.4.3 |
Showing 21