CVE-2025-55085

Katalog CVE

CVSS 7.5 · High EPSS 0,61%

Kerentanan Out-of-bounds Read pada eclipse threadx netx duo. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior.

Rincian

Terbit di NVD

17 Oktober 2025

Terakhir diubah

9 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read
CWE-1286: Improper Validation of Syntactic Correctness of Input

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9c77-rgp9-c2g2 exploit · advisory vendor