Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CRITICAL: CVE-2025-55081 (CVSS 9.1) Eclipse Foundation NextX Duo <6[.]4[.]4 vulnerable to out-of-bound read in TLS ClientHello processing. Missing length verification enables remote attacks. Patch immediately to 6[.]4[.]4+ #CVE #Vulnerability #PatchNow https://t.co/eSpDYlqJkY
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | eclipse | threadx_netx_duo | - | - | - |