CVE-2025-55087

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.

Score

CVSS 3.1 7.5 High

Status

Analyzed - emo@eclipse.org

Published

2025-10-17

Last modified

2026-10-09

Weaknesses

CWE-125, CWE-1285

Affected products

• Threadx Netx Duo (Eclipse)
• Nextx Duo (Eclipse Foundation)

References

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-v474-mv4g-v8cx