PT-2025-42360 · Eclipse Foundation · Netx Duo

Justin Stauffer · Published 2025-10-15 · Updated 2025-10-21 · CVE-2025-55083

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4

Description An incorrect bound check in the Eclipse Foundation ThreadX component of NetX Duo can lead to an out-of-bounds read. This occurs when the bound check is off by two, potentially allowing access to memory outside the intended boundaries.

Recommendations Update NetX Duo to version 6.4.4 or later.

Fix

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-55083

GHSA-9HW5-4XCV-JPRM

Affected Products

Netx Duo

References · 7

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9hw5-4xcv-jprm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55083 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55083 · Security Note
• https://t.me/cveNotify/138782 · Telegram Post
• https://twitter.com/CVEnew/status/1978545058246000849 · Twitter Post
• https://t.me/CVEtracker/35005 · Telegram Post
• https://t.me/cveNotify/139662 · Telegram Post