Networking Module Vulnerability in Eclipse Foundation's ThreadX

CVE-2025-55086

What is CVE-2025-55086?

In versions of NetXDuo prior to 6.4.4, a vulnerability exists within the networking support module for Eclipse Foundation's ThreadX. This concern specifically arises in the DHCPV6 client, where an unchecked index can lead to unauthorized extraction of the server DUID from the server's reply. By crafting a malicious packet, an attacker may exploit this flaw, potentially resulting in an out-of-bounds memory read.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References