PT-2025-42422 · Eclipse Foundation+1 · Thread+1

Justin Stauffer · Published 2025-10-16 · Updated 2025-10-21 · CVE-2025-55084

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4

Description An incorrect bound check exists in the nx secure tls proc clienthello supported versions extension() function within the extension version field of the Eclipse Foundation ThreadX component in NetX Duo.

Recommendations Update to version 6.4.4 or later.

Fix

Buffer Over-read

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-55084

GHSA-M474-39RW-V8GM

Affected Products

Netx Duo

Thread

References · 8

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-m474-39rw-v8gm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-55084 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55084 · Security Note
• https://t.me/cveNotify/139663 · Telegram Post
• https://twitter.com/CVEnew/status/1978932551688544582 · Twitter Post
• https://t.me/CVEtracker/35056 · Telegram Post
• https://t.me/cveNotify/138910 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1978777494355394739 · Twitter Post