Denial of Service Vulnerability in Eclipse ThreadX NetX Duo HTTP Server

CVE-2025-0726

Summary

Eclipse ThreadX NetX Duo, prior to version 6.4.2, contains a vulnerability in its HTTP server functionality that allows attackers to execute a denial of service attack. The core problem arises from inadequate handling of error conditions, which causes the server to fail to close files correctly leading to continuous 404 errors upon subsequent file requests. To mitigate this issue, users can disable PUT request support as a temporary workaround. For a permanent resolution, upgrading to a patched version is recommended.

References