CVE-2025-55081: Potential out of bound read in _nx_secure_tls_process_clienthello()
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the nxsecuretlsprocessclienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55081?
CVE-2025-55081 is classified as a high severity vulnerability due to the potential for attacker exploitation through crafted SSL/TLS client hello messages.
How do I fix CVE-2025-55081?
To fix CVE-2025-55081, upgrade Eclipse Foundation NextX Duo and ThreadX to version 6.4.4 or later, which includes the necessary length verification for SSL/TLS messages.
What systems are affected by CVE-2025-55081?
CVE-2025-55081 affects Eclipse Foundation NextX Duo and ThreadX versions prior to 6.4.4.
What is the impact of exploiting CVE-2025-55081?
Exploitation of CVE-2025-55081 could allow an attacker to cause denial of service or potentially execute arbitrary code by sending malformed SSL/TLS client hello messages.
When was CVE-2025-55081 disclosed?
CVE-2025-55081 was disclosed following the identification of the vulnerability, with the patch available in version 6.4.4 released by the Eclipse Foundation.