How severe is CVE-2025-2260?

This vulnerability has a severity rating of HIGH with a CVSS score of N/A out of 10.

What type of vulnerability is CVE-2025-2260?

This is classified as CWE-459, which is a common weakness in software security.

CVE-2025-2260 - HIGH Severity | CVSS N/A

Vulnerability Description

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause a denial of service by specially crafted packets. The core issue is missing closing of a file in case of an error condition, resulting in the 404 error for each further file request. Users can work-around the issue by disabling the PUT request support. This issue follows an incomplete fix of CVE-2025-0726.

Related Vulnerabilities

CVE-2023-20518

LOW

CVSS:1.9(Low)

Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially result...

CWE-4592023

CVE-2005-1744

CRITICAL

CVSS:9.8(Critical)

BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the application without hav...

CWE-4592005

CVE-2020-13451

CRITICAL

CVSS:9.8(Critical)

An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros.

CWE-4592020

CVE-2021-32928

CRITICAL

CVSS:9.8(Critical)

The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 194...

CWE-4592021

CVE-2021-36205

CRITICAL

CVSS:9.8(Critical)

Under certain circumstances the session token is not cleared on logout.

CWE-4592021

CVE-2021-45330

CRITICAL

CVSS:9.8(Critical)

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

CWE-4592021