CVE-2025-55087: medium-severity vulnerability in Eclipse Foundation NextX Duo
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
NextX Duo's SNMP addon before version 6.4.4 has a flaw that allows attackers to read data beyond memory boundaries by sending specially crafted SNMPv3 security messages. This could expose sensitive information or cause the system to crash.
A out-of-bounds read vulnerability exists in the SNMPv3 security parameter parsing of NextX Duo's SNMP addon prior to 6.4.4. An attacker can craft malicious SNMPv3 messages to trigger an OOB read, potentially disclosing sensitive memory contents or causing denial of service; exploitation requires network access to the SNMP service.
In the same product, most dangerous first.