{"id":"CVE-2026-115215","title":"NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool","summary":"In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed session pool for the first datagram from any unrecognised address and port, before the cookie exchange, and ne…","severity":"high","cvss":8.7,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-770","CWE-772"],"vendor":"Eclipse Foundation","product":"Eclipse ThreadX","affected":["eclipse_threadx >= 6.0 <= 6.5.2.202603a"],"published":"2026-11-02","updated":"2026-11-02","sourceUpdated":"2026-11-02T21:43:53.639Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115215","references":[{"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-3p2g-x7hh-3w4c"},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/487"}],"tags":["cve.org"],"epss":0.00412,"epssPercentile":0.35627,"ingestedAt":"2026-11-05T19:30:42.861Z","slug":"CVE-2026-115215","body":"## Overview\n\nIn Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server allocates a session from its fixed session pool for the first datagram from any unrecognised address and port, before the cookie exchange, and never releases a session whose handshake stalls. A remote, unauthenticated attacker can exhaust the pool with one spoofed datagram per source and deny DTLS service to legitimate clients until the application resets the sessions.\n\n## Affected\n\n- `eclipse_threadx >= 6.0 <= 6.5.2.202603a`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":47.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}