Integer Underflow Vulnerability in Eclipse ThreadX NetX Duo HTTP Server

CVE-2025-0727

What is CVE-2025-0727?

The NetX HTTP server in Eclipse ThreadX NetX Duo versions prior to 6.4.2 is vulnerable to an integer underflow. This flaw allows an attacker to create denial of service conditions by sending specially crafted packets with a Content-Length header smaller than the actual data size. This can occur when attempting to write a large file, leading to potential disruptions in service. It is recommended to disable HTTP PUT support as a workaround until a patch is applied.

References