PT-2026-135487
CVE-2026-114408
·
Published
2026-11-02
·
Updated
2026-11-02
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a
Description
When built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler fails to verify if a destination-table entry was successfully added before using it. A remote attacker can flood the destination table with Packet Too Big messages containing new destinations. This leads to a NULL pointer dereference in the IP helper thread, causing the system to crash on targets that fault on address 0 and resulting in a complete stop of all network processing.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾