Denial-of-Service Vulnerability in Eclipse ThreadX NetX Duo IPv6 Component

CVE-2025-55102

What is CVE-2025-55102?

A denial-of-service vulnerability has been identified in the IPv6 functionality of Eclipse ThreadX NetX Duo. This issue arises when a specially crafted network packet, labeled as 'Packet Too Big,' is sent, including over 15 distinct source addresses. By exploiting this vulnerability, an attacker can send a malformed packet that may disrupt service, potentially leading to outages and critical downtime for affected systems. Organizations utilizing Eclipse ThreadX NetX Duo should implement appropriate measures to safeguard against such attacks.

References