PT-2025-42422 · Microsoft+1 · Netx Duo+1

Justin Stauffer

·

CVE-2025-55084

·

Published

2025-10-16

·

Updated

2025-10-21

CVSS v4.0

6.9

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4
Description An incorrect bound check exists in the nx secure tls proc clienthello supported versions extension() function within the extension version field of the Eclipse Foundation ThreadX component in NetX Duo.
Recommendations Update to version 6.4.4 or later.

Exploit

Fix

Buffer Over-read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-126

Related Identifiers

CVE-2025-55084
GHSA-M474-39RW-V8GM

Affected Products

Netx Duo
Thread