CVE-2026-106465: falha de média gravidade em Eclipse ThreadX NetX Duo
Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603, the NetX Secure DTLS server never compares the cookie a client returns with the one it issued, and treats any non-empty cookie as verified. A remote attacker can make the server send its full handshake flight, several kilobytes, to a forged source address, using it to reflect amplified traffic at a third party.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:L
Produtos afetados
Eclipse Foundation · Eclipse ThreadX NetX DuoCVEs relacionadas — Eclipse ThreadX NetX Duo
No mesmo produto, das mais perigosas para as menos.
CVE-2026-114408HIGHNULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullEPSS 0.4%CVE-2026-102718HIGHOut-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER lengthEPSS 0.3%CVE-2026-102715HIGHmDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packetEPSS 0.3%CVE-2026-102721MEDIUMTFTP client and server copy the ERROR packet message without bounding the read against the packetEPSS 0.3%CVE-2026-102716HIGHA malformed Session header permanently orphans one packet-pool block per RTSP requestEPSS 0.3%CVE-2026-102713HIGHUnbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallEPSS 0.3%