Denial of Service Vulnerability in Eclipse ThreadX NetX Duo

CVE-2025-2260

What is CVE-2025-2260?

A denial of service vulnerability exists in the HTTP server functionality of Eclipse ThreadX NetX Duo prior to version 6.4.3. This flaw allows an attacker to craft specific packets that exploit improper error handling, leading to continuous 404 errors for subsequent file requests. Although users may temporarily mitigate the issue by disabling PUT request support, it highlights an incomplete fix related to a previous vulnerability. Ensure you are using the updated version to safeguard against potential exploits.

References