Skip to content
Sign in
8.7 High

CVE-2025-55102 A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo

Description

A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Eclipse ThreadX - NetX Duo 6.4 earliest → 6.4.3 No fix stated

Other CVEs of Eclipse ThreadX - NetX Duo

The 8 CVEs of Eclipse ThreadX - NetX Duo →
CVE-2026-93003 The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of… 6.9 Medium CVE-2026-92843 A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server… 8.7 High CVE-2026-92853 The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first… 8.7 High CVE-2026-94018 The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length`… 8.8 High
Track this CVE