6.3
Moyenne
CVE-2025-55086 In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client…
Description
In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| NextX Duo 6.4 | premières → < 6.4.4 | 6.4.4 |