CVE-2025-55102 — Eclipse Foundation / Eclipse ThreadX - NetX Duo

CVE-2025-55102

Eclipse Foundation / Eclipse ThreadX - NetX Duo PUBLISHED

Description (CNA)

A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse ThreadX - NetX Duo	affected 0 through 6.4.3

CWE

CWE-400, CWE-404, CWE-770

References

https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-f3rx-xrwm-q2rf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.