CVE-2025-2260 | BDVDB-2026-273659 Detail

Description#

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users can work-around the issue by disabling the PUT request support. This issue follows an incomplete fix of CVE-2025-0726.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-04-06Record published in the CVE List.
2. Version 22025-04-14Most recent update recorded in the CVE List.