Eclipse Foundation Nextx Duo vulnerabilities

2 vulnerabilities

Known vulnerabilities in Eclipse Foundation Nextx Duo, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-55086eclipse foundationnextx duo+1
EPSS score
0.41%
In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read.7.5CVE-2025-55087eclipse foundationnextx duo+1
EPSS score
0.46%
In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.