Out-of-Bound Read Vulnerability in NextX Duo's SNMP Add-on from Eclipse Foundation

CVE-2025-55087

What is CVE-2025-55087?

In versions prior to 6.4.4 of NextX Duo's SNMP add-on, a vulnerability exists that may allow an attacker to perform an out-of-bound read, posing a security risk through specially crafted SNMPv3 security parameters. This issue stems from underlying issues in how the SNMP add-on processes certain security parameters, potentially leading to information disclosure or other exploits. It is crucial for users of the affected product to review their installations and apply the necessary updates to maintain security integrity.

References