PT-2025-42798 · Eclipse Foundation · Thread+1

Ekleezg · Published 2025-10-20 · Updated 2025-10-20 · CVE-2025-55086

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetXDuo versions prior to 6.4.4

Description An issue exists in the DHCPV6 client within the networking support module for Eclipse Foundation ThreadX. Specifically, an unchecked index during the extraction of the server DUID from server replies can lead to an out-of-memory read condition. An attacker could potentially exploit this with a crafted packet.

Recommendations Update to version 6.4.4 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

CWE-1285

Related Identifiers

CVE-2025-55086

GHSA-99PW-CP79-2J5J

Affected Products

Netx Duo

Thread

References · 5

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-99pw-cp79-2j5j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55086 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55086 · Vendor Advisory
• https://t.me/CVEtracker/35334 · Telegram Post
• https://twitter.com/CVEnew/status/1980338983662973302 · Twitter Post