CNNVD-202510-2430 Information

CNNVD ID

CNNVD-202510-2430

CVE-2025-55087

  • CNNVD Published: 2025-10-17

Description (Chinese)

Eclipse ThreadX NetX Duo是Eclipse ThreadX开源的一个 IPv4 和 IPv6 双重网络堆栈。 Eclipse ThreadX NetX Duo 6.4.4之前版本存在安全漏洞,该漏洞源于特制SNMPv3安全参数可能导致越界读取。

Description (English)

Eclipse ThreadX NetX Duo is a dual IPv4 and IPv6 network stack of Eclipse ThreadX open sources. Eclipse ThreadX NetX Duo 6.4.4 had a security loophole, which originated from a specially designed SNMPv3 security parameter that could lead to cross-border reading.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Eclipse ThreadX

Published

2025-10-17

Last Modified

2026-02-24

References

https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-v474-mv4g-v8cx https://access.redhat.com/security/cve/cve-2025-55087

Patch

https://github.com/eclipse-threadx/netxduo/releases

Share on: