Medium · 6.3 CVE-2025-55087 EUVD-2025-34863

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by …

Published Oct 17, 2025 · Updated Oct 17, 2025 · Assigned by eclipse

Vendor: Eclipse Foundation Product: NextX Duo

Description

In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.

Affected products

Vendor	Product	Affected	Fixed
Eclipse Foundation	NextX Duo	< 6.4.4	6.4.4

References

https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-v474-mv4g-v8cx vendor-advisory