NextX Duo vulnerabilities
2 known vulnerabilities in NextX Duo from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest first
- 9.8 Critical severity
NextX Duo: Out-of-bounds Read
In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory rea
- 7.5 High severity
NextX Duo: Out-of-bounds Read
In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.