cvedb.io
CVE-2025-2260
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-04-06T19:15:41.153 · Last modified 2026-06-17T09:06:38.840

Summary

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users can work-around the issue by disabling the PUT request support. This issue follows an incomplete fix of CVE-2025-0726.

Affected products

eclipse — threadx_netx_duo

Does this affect you?

Add your gear to cvedb and we'll alert you only when eclipse ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.