Netxduo
Monthly
Eclipse NetX Duo's DTLS server implementation uses predictable HelloVerifyRequest cookies due to insufficient randomness (CWE-330), enabling unauthenticated remote attackers to bypass source-address validation and potentially facilitate amplification attacks. Affected deployments are those running NetX Secure as a DTLS server with cookie exchange enabled; exploitation requires high attack complexity and no public exploit or active exploitation has been identified. The independent assessment rates this as a moderate, narrow-trigger weakness.
Eclipse NetX Duo's DTLS server implementation uses predictable HelloVerifyRequest cookies due to insufficient randomness (CWE-330), enabling unauthenticated remote attackers to bypass source-address validation and potentially facilitate amplification attacks. Affected deployments are those running NetX Secure as a DTLS server with cookie exchange enabled; exploitation requires high attack complexity and no public exploit or active exploitation has been identified. The independent assessment rates this as a moderate, narrow-trigger weakness.